Securing apollo using meteor with no mongo

How to secure an apollo server that is being used by a meteor (with no mongo) client?