Adding authorization header token support to data streaming, job submitter, data download services. Possibly by aligning or incorporating them into the REST API via the transformations api.
For example:
POST /transformations/submit | transact | transactadata/<service>/< repository >/< workspace >
Or maybe through a new Services Manager API?