Can the sync tool be used for Gramps Web in a Cloudflare tunnel that requires authentication?

Can the sunc tool reach a Gramps Web install in a Cloudflare tunnel that requires authentication and has access policies.

I assume you would need a Cloudflare service token and an access policy that allows login bypass with a service token, but is there a way to add the token credentials to the sync add-on?

I also understand that a Gramps Web login/password would also be added in the sync tool. I have seen that explained, but I haven’t seen how credentials would be added to authenticate the sync tool to get into the Cloudflare tunnel.

Is this possible? Does the sync tool work for a Gramps Web install behind a Cloudflare tunnel?