Description of problem: The provider inventory contains information about the provider layout and this can be considered sensitive by some users. It would be better to add an authentication layer to the inventory service to limit access to authenticated users. The validation service could use its service account token.
The validation service doesn't call back the inventory, hence doesn't need authentication. Closing.