Make WMS private so require users to login to access data served up by WMS. - [Authentication with OAuth2 — GeoServer 2.12.x User Manual](http://docs.geoserver.org/stable/en/user/community/oauth2/index.html)