As of now the deployment model of the Native Services REST API service is standalone. There are several cross-cutting solutions that can be inherited for free (kerberos, HA, ACLs, trusted proxy support, etc.) by the REST API service if it is embedded into the RM process. In fact we can expose the REST API via the same port as RM UI (8088 default). The URI path /services/v1/applications will distinguish the REST API calls from other RM APIs.