I'm assuming that the auth token is retrieved externally to the python client via the user's credentials?