How to Secure Database APIs Without Slowing Delivery