Device API Access Control Use Cases and Requirements