if the code is only living in that account, you can do what @stalbert said and use token based authentication and use a restlet