@@ -0,0 +1,914 @@
+// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.%0Apackage com.yahoo.vespa.hosted.controller.restapi.filter;%0A%0Aimport com.yahoo.jdisc.Response;%0Aimport com.yahoo.jdisc.handler.FastContentWriter;%0Aimport com.yahoo.jdisc.handler.ResponseDispatch;%0Aimport com.yahoo.jdisc.handler.ResponseHandler;%0Aimport com.yahoo.jdisc.http.filter.DiscFilterRequest;%0Aimport com.yahoo.jdisc.http.filter.SecurityRequestFilter;%0A%0A/**%0A * @author bjorncs%0A */%0Apublic class BlockingRequestFilter implements SecurityRequestFilter %7B%0A%0A    @Override%0A    public void filter(DiscFilterRequest request, ResponseHandler handler) %7B%0A        Response response = new Response(Response.Status.FORBIDDEN);%0A        try (FastContentWriter writer = ResponseDispatch.newInstance(response).connectFastWriter(handler)) %7B%0A            writer.write(%22Forbidden to access this API%22);%0A        %7D%0A    %7D%0A%7D%0A

Add simple security filters that returns 403 forbidden