Do I need a FIM 2010 R2 CAL for user identities that will only ever be sync'd?

Hi,

 I have 2 domains and I'm using FIM 2010 R2 for synchronization between them using CSV files. End users will never use the fim portal, only administrators will be using the FIM portal for configuring the sync rules and doing administration.

Reading the FIM 2010 R2 licensing documentation it states that each user identity managed by FIM 2010 R2 requires a CAL, however it also states that CALs are not required if the user identities are only being used in sync rules (i.e. no portal access).

In a scenario where I've setup independent forests and installed FIM in one to manage the import\sync of several thousand accounts, am I correct in thinking that I only need licenses as follows:

1 x FIM 2010 R2 server license
1 x Windows\SQL license as required by FIM
small number # of CAL licenses for ADMINISTRATORS only
0 x end user licenses (identities to be managed\sync'd by FIM)

IT Support/Everything