Implement "API user/pass"

From the Attila, the developer of the Enyim client:

...i'm not sure if it's a safe practice to have the admin password lying around in config files. Would it be possible to have an "API password" or something similar? This api password would only let you access the config interfaces but not the admin interface. But i see no reason for having admin/pass on the api interface since i can write into the db without authentication anyways.