Thanks Kash, I understand exactly what you mean and was able to get the Auth codes to work. So, this is basically setup per user, who can then use this on any phone that doesn't a high enough COR.
The second part of your answer, beginning with "Alternatively," is configuring it on an extension...