Methods that have an empty rate limit specified for app-only auth are simply not available in app-only auth – they require a user context. The mentions timeline is only available for an authenticated user and only the mentions timeline belonging to that user.