Walk me through how you would secure a new API that handles sensitive customer billing data at Vodafone.
