I agree with chsh about the key auth. I'd also limit who can access that part of the website via standard access controls limiting the requests to specific machines.