Endpoint reference, authentication and rate limits will live here once the first endpoints are public.