it's a required flag you pass to SpiceDB for what value callers must provide as a bearer token