Sync and Client API security

Been looking at the project and it's really cool. 

I couldn't find any references to securing the node-to-node and client API's, is this something that is supported?

For example, maybe TLS and pre-shared key or another scheme to ensure only authorised users 