The new pilot lets advertisers restrict sensitive API actions to approved applications, adding an extra layer of security.