Protecting an API with Zitadel - ZITADEL