Hello! We're looking to increase the security of our application on PlayFab. One of the ways we want to do this is by restricting the RegisterPlayFabUser requests to be called only from our domain/website (or have a mechanism that would supply some sort of security token before going through). Since the RegisterPlayFabUser API does not require any authentication headers, there's nothing stopping someone from potentially creating new PlayFab Users on our application if our titleId was ever exposed. Is there a way we could adjust the "Entity Global Title Policy" to put a restriction like this in place, or is there another way we could restrict this?
