Auth-token and updating schema - "Alter denied with error: No Auth Token found"

Issues Dgraph Clients
2

--auth_token - This token, for now, protects only the Alter and Admin requests. Not mutations or queries. The Poor man’s ACL will be soon available for other requests.

See this comment.

So, for the Alter case, I’m not sure if it is implemented in Dgraph-js. Maybe @paulftw or @dmai can give some light here.