Use non-session credentials for generating federation token for upload.