Result of NSD-575:

As reconfirmed by recent blackholing of open Cloud9 instance, we need to have tighter restrictions on which service must have basic authentication enabled.

• Add AuthRequired field to system spec. Like the privileged option, this is field can only be changed by the admin user.
• This value is always true for personal catalog services.

This ticket is complete when the AuthRequired field implemented and respected by the API Server.