Can you explain how you would implement a RESTful API using Spring Boot and ensure it follows best practices for security?