Hi,
You can use one of two mechanisms (or both if you like!).
The first is basic adobe-style authentication. If you enable the authentication section in the config.lua, any streams that are pushed into the server will need to provide a username/password combination as specified in users.lua.
You can also create mount-points to restrict and obscure the streams which can be pushed into the EMS.
Bryan