I've asked Jay about this and it looks as though we ask for authentication right now primarily because the "when" string parsing leverages the session user's timezone.
So, despite my initial response, it appears we need to fix the documentation, not the API itself.
Mark