Use OAuth for notes API calls and require authentication to close