Protection for api assign_queue_num

[cccdi]

Is your feature request related to a problem? Please describe.
Would like to prevent the case of assign_queue_num api being call by robot and generate junk api_request_id.
It is so easy to create a robot to call large amount api (like postman) as there is no protection.
If the queue is not expiry in short period of time, the waiting room will not work as expected.

Describe the feature you'd like
Any solution to prevent robot to call the api.

[cassneal]

Thank you for requesting this. We have add it to our backlog to look into.