More feedback from users, they found that switching user account with itp auth login, then running subsequent commands, would encounter a failure as the itwin and imodel context still referred to items the old user had access to, but the new one did not. The failure is of course expected, however they assumed the context would be reset when logging in as a different user.
Not especially critical as I'm not sure how often users will switch between different accounts, but feedback worth flagging.