As an application developer, I want the mean reponse time of a call to a protected API to not exceed more than 10% of the mean response time for the same call if the API was unprotected.

Notes: Performance comparison with APIs that do not use the access token.