Have dug through the documentation thoroughly and checked myself multiple times on this. Attempting to use the ArcSOC optimizer or the Excel Reports extensions causes 403 returns and appears to be an issue with python calls.
I have attempted to use multiple different user accounts for the authentication needs of these extensions and used both direct connections to individual machines or an F5 BigIP based VIP that's load balancing across multiple machines all with the same 403: Forbidden results. Have confirmed all accounts that were used can call the token page in Chrome from the AGS Monitor server just fine and with all URL variations was successfully able to authenticate with all user variations.
Unfortunately, the Excel Reports extensions fails to capture any logs but within Monitor it does throw a 403: Forbidden response. ArcSoc does log this and I have attached an example of those logs. Naturally, this isn't a Help Desk supported item and not yet convinced it's worth shelling out the credits to address this with the Prof Services team.