why not? it is necessary to protect API server with secure auth. It does not charge you a penny.