We should improve the authentication instructions for user workload monitoring for accessing metrics from outside a cluster as documented in OCP 4.10+ here:

https://docs.openshift.com/container-platform/4.10/monitoring/enabling-monitoring-for-user-defined-projects.html#accessing-metrics-from-outside-cluster_enabling-monitoring-for-user-defined-projects

We need to update the auth instructions so that users are not instructed to "steal" the auth token from the prometheus-user-workload service account. Rather they should be instructed how to reuse their own auth token in a similar way to what is explained here:
https://docs.openshift.com/container-platform/4.10/monitoring/accessing-third-party-monitoring-uis-and-apis.html

More information is in the Slack discussion here:

https://coreos.slack.com/archives/C0VMT03S5/p1652189154437079