Tokens generated from Management Console are intended for different things - currently I think only for publishing network maps.
So yes, current way it to get temporarily session id.
UPD: actually permanent tokens are supported in the new API - the one that is server module and is currently under development. But not in the old one.
