the reason we need it is to allow working with the API from inside Drupal, and unbreaking the tests. The outcome is actually as you would expect it, if you use it via API as logged in user, you don't need to re-authenticate