I was also wondering about the /configure endpoint. There was no mention of access control.