Enable it with the --authenticate-api flag.
The plan is to make API authentication the default in a few versions to
let API devs experiment with auth before being required to use it.
Revert this commit to make api auth default again.