Unauthenticated API access

Allow application software to start and destroy virtual servers without further configuration.