Adding a JWT authenticated API layer to something is not a first choice for adding additional security. If you want something like this look into platform leve

Adding a JWT authenticated API layer to something is not a first choice for adding additional security. If you want something like this look into platform level firewalls (ex: AWS security groups) or run spiped in front of your SSH server. I’d trust that a hell of a lot more than a REST API.