You should be able to request the device token irrespective of the authorization status. This allows 'silent' notifications aka 'content-available' notifications out of the box.
I'd just request the device token right away in didFinishLaunching.
Topic:
App & System Services
SubTopic:
Notifications
Tags: