Securing Elasticsearch with ember-data-elasticsearch-kit

I need to secure my ElasticSearch installation but would still like it to be publicly available to the users of my Ember app.

I looked into using a GET-request only solution, but ember-data-elasticsearch-kit only uses POST, and I might like to save data to ES at some point, not just read-only.

Is there any way to do this? OAuth or something?