Securing APIs is specialized work. Here’s what organizations should look for when selecting an outside partner.