Yes it is read-only, you can't authenticate a user in any way.