title: Securing a web service so it can only be called by a specific Android application
body: <p>We have a web service that should only be called by a specific Android app. What solutions are there for this problem?</p>
  
  <p>The requirement is to not use authentication at all.</p>