Well, the easiest way I could find was to edit the AJAX object itself to force use credentials on. When I have time to put the work into it, I'll clone the AJAX object and add an edittime toggle for it, but in the mean time this works.
Mulling if I should make this an actual feature request, or if I'm the only one who will even likely use this.