Include guidelines around IP Whitelisting

[david-agahchen]

Include guidelines around IP Whitelisting for partner-facing APIs that are not intended for the general public.

[jeff-card]

Thank you for your comment! A peer review was held on August 9th and we have the following feedback:

To be forward-focused, these guidelines will advise against IP whitelisting, the wording of which will be modeled after the Federal government’s API standards. This will be added under the “Authenticate and Authorize” section of the guidelines.