Generally it's done with an ssh token