[MM3-users] exposing Mailman3 API securely