Implement server peer-to-peer authentication

We should authenticate the Internal rpc requests too.

Maybe a special ACL with path == 'PEER' ?