Programmatically these can be provided by the library via the header and not URI.   We may want to leave the interpretation on how to pass these to the downstream developers instead of indicating a specific implementation.

For example curl and curl based libraries can pass a -u or --user option where --user partner:token