This is the only credentials type we support right now, which just sends an opaque token via the "Bearer" HTTP auth scheme.
Martin Atkins