The first task is to make the communication between Workers and Core secure. (references: 1., 2.)
The second is to make the Core REST API secure: