As [noted](https://django-oauth-toolkit.readthedocs.org/en/latest/rest-framework/permissions.html) in the docs.