Add a list of users in the config that have admin credentials and create a filter that only lets those user through. Add this filter to all the admin endpoints.