Add authentication interceptor to grpc server

[markstory]

In production environments we need to lock down RPC endpoints with authentication so that only authorized clients can make requests.

Ideally the proxy-less server mesh from GCP automatically sets Authorization headers on requests. If not, we could use shared secrets or signed requests from clients.