Comment by cheriot

Needing a token to call someone's API seems reasonable to me.