@sp my goal is to have a private site where content isn't visible to anyone except myself. I'm going to use it as a middle-man between IFTTT automations and my RSS reader. I'm going to use FreshRSS to read the feed, which does handle password protected feeds. But I need XML-RPC to be accessible without an additional password so that IFTTT can reach it.
@mdrockwell If it’s just IFTTT, and you can control the name of the RSS feed file, you can have the file name be a 50 character long random URL safe string that isn’t mentioned anywhere else in your site or HTML. Then manually point IFTTT towards that feed.
Bonus points if you append a URL var that Wordpress checks against, and refuses to render if the var is incorrect. If something happens, change the accepted value and IFTTT is locked out.