Is there a way to add authentication to the sidecar when calling the scraping endpoint

[JLLLinn]

Since the /metrics endpoint of the main container is open to public, is there a way to add authentication such as a header with secret in the scraping request, so the main container can throw permission error when the scraping request is not authenticated