Question regarding external script authentication