We have IAP (Identity-Aware Proxy) enabled in our spinnaker setup. Is there anyway for roer to have permission to connect to SpinnakerAPI?