yeah that's been something I've been meaning to do, have a simple way of deploying so that only the "registration" endpoint is public