I looked through all the documents of the API Gateway but was not able to find any reference of the security features that Google API Gateway provides - for example does it