Thank you kindly, BlueWall, for a patch that:

Move json stats to non-published resource name
Remove well-known resource name for json stats, 
creating dynamic uris with private keys and add 
a user configurable resource name for region owner usage.

OpenSim/Framework/RegionInfo.cs

@@ -211,6 +211,8 @@ namespace OpenSim.Framework
         public int ProxyOffset = 0;
         public string RegionName = String.Empty;
         public string regionSecret = UUID.Random().ToString();
+        
+        public string osSecret;
 
         public UUID lastMapUUID = UUID.Zero;
         public string lastMapRefresh = "0";