It should behave like `apiParams` (minus user auth), so I think we do. I'll double check.