Securing workspace

Confirming auth & policy enforcement