We need to figure out a basic user-based authentication before we expose this in the University API.