We are running our own server.
We use the patch to autostart the lobby.
Wat we would like is to of use the password of the moderator otherwise force to enter a password for the lobby.
If you have also secure domain
or token
authentication you may check lobby_bypass modules in prosody-plugins