Agreed - shared keychain + unique token would work. Was concerned original post was talking about the advertiser ID as authentication.