I don't mean authentication. An authorization code is something that is handed out to already authenticated identities.

No, they probably don't. They probably know exactly what they are saying.