Is it possible to restrict usage of entity.delete and entity.purge?

Like most API's, it's used to communicate over the Internet, in a secure way. we host services for our customers, and our customers are responsible for the data and managing it. It's not really any different than /entityType.delete except that /entity.purge leaves the schema in place to be re-used. So, the same caution should be taken for this API call as any other API call: access to the Capture Dashboard should be limited to the fewest number of people possible, and those people need to be made aware of the dangers of making /entity.purge and /entity.delete API calls.