Actually you would be much better off creating your own webapi2 project or similar api project to handle the requests, we do this all the time instead of relying on the built in REST API (its pretty dated and does not do a good job of updating more than one specific object at a time). Have that API project connect to the Kentico dll's and you can then have total freedom to have your API do what you need it to and use standard, modern techniques (especially around security).