Scratch that. The search API can use application-only auth as per https://dev.twitter.com/docs/auth/application-only-auth