https://obscureproblemsandgotchas.com/uncategorized/wcf-security-requiring-authorization-to/
WCF Security: Requiring Authorization to lock down your Exposed Services