New threats demand that we transform the way we think about securing the endpoints. Case in point: APIs, writes Ross Moore.