Require HTTP signatures (if enabled) for routes used by both C2S and S2S AP API