Add application-only auth support

I’m not happy about hardcoding this.