How to add authentication to the model canister, so that it could be called only from a certain other canister? (to avoid hackers using my cycles)