How do you approach designing a secure RESTful API that handles sensitive patient data at Brightspring Health Services?