ZegnatProbably. It all depends on who/what you are building for. If you are limiting access to the client itself, and if the client only ever posts to your own micropub endpoint, you could also hardcode the token that it needs to send to your endpoint
