A few helper search endpoints (aggregations for fields, etc) assume `self.uid` will be populated, which is not true for device auth.