EventSub: "subscription missing proper authorization"

In that case, the Creator / streamer user access token shouldn’t be stored for later use, it just needs to be authorized and that’s it?