Would it work if i told them to whitelist the ips in vapi docs and use username and pass for authentication . someone pls