Or am I really missing something here, and you set up the object with the security token used on the binary file?
My question (sorry if it's super dumb and I'm missing something) is what permissions are needed to communicate via the event?