You could set up two way TLS with client certificates