I am investigating building a map service that our field iOS users could use to inventory items in the field. As I understand it though I need to publish a feature service for those points that ArcGIS Online can view in order to build the map that will be consumed in the iOS application. My concern though is that ArcGIS Online can't see my password protected services so I'd need to publish that feature service with out any user security in place which isn't feasible. Why add security to the ArcGIS Online Maps though groups etc if anyone can just connect directly to the ArcGIS Server? What am I missing?