Configure a TURN/STUN server, where user can be authenticated using a REST-API with a shared secret (for example Matrix-Synapse users).
