This is where the superuser can enable/disable API properties.

Allow Get with Side Effects: Allow GET HTTPS calls to be used for operations with side effects

Enabling this flag will allow GET to be used with any HTTP API operation. The most secure setting is No

Allow Text Plain: Allow "text/plain" to be used as an alias for "text/zinc". The most secure setting is No

Attest Cookies: Require cookie attestation

When enabled all non-GET requests which use a cookie as their authorization token must also include a separate HTTP header called SkyArc-Attest-Key bound to the session. The most secure setting is "Yes"

Disable Error Trace: Disable including stack trace when requests raise an exception