Unorthodox, perhaps, but this should work fine, assuming you're "kicking off" the R script by rendering an R view. The R script is passed context from the server, including the current user's LabKey session id. Rlabkey calls should use this session id to authenticate back to the server.

Adam