How can cookie/session authentication be used in wp-json fetch request?

After reading more, thanks to Jacob’s link and more googling, it turns out that wordpress “nonces” aren’t actually nonces. Nonces are to be used once, but wordpress “nonces” are allowed to be used an unlimited number of times for 2 “ticks”, which normally means between 12 and 24 hours. These wordpress “nonces” are actually tied to a session and hence give me exactly what I want, since I can reuse the wordpress “nonce” for a period of time.