Passwordless REST API

Hi there!

Now I am trialing ecSONiC and have discovered that the REST API endpoint is running in passwordless mode by default. And I didn't find any instructions on how to set the password to it, neither in the user manual, nor CLI guide. So it's looking strange from my point of view. Is it possible to fix it somehow?

Steps to reproduce:
Environment:

SONiC Software Version: SONiC.Edgecore-SONiC_20221117_052015_ec202111_245
Distribution: Debian 11.5
Kernel: 5.10.0-8-2-amd64
Build commit: b3225170d
Build date: Thu Nov 17 06:19:13 UTC 2022
Built by: ubuntu@ip-10-5-1-155

Platform: x86_64-accton_as7726_32x-r0
HwSKU: Accton-AS7726-32X
ASIC: broadcom
ASIC Count: 1
Serial Number: --cutted--
Model Number: FP3ZZ7632074A
Hardware Revision: N/A
Uptime: 11:08:56 up 20:04,  1 user,  load average: 0.54, 0.48, 0.51

Running from wsl-containerised ubuntu

➜  ~ curl --insecure -X GET "https://172.30.78.188/restconf/data/openconfig-system:system/config/hostname" -H "accept: application/yang-data+json"
{"openconfig-system:hostname":"sonic"}%
➜  ~ curl --insecure -X PATCH "https://172.30.78.188/restconf/data/openconfig-system:system/config/hostname" -H "accept: application/yang-data+json" -H "Content-Type: application/yang-data+json" -d "{ \"openconfig-system:hostname\": \"sonic-api-auth-test\"}"
➜  ~ curl --insecure -X GET "https://172.30.78.188/restconf/data/openconfig-system:system/config/hostname" -H "accept: application/yang-data+json"
{"openconfig-system:hostname":"sonic-api-auth-test"}%