Authentication

API tokens use CLIENT_ID.SECRET. Secrets are stored as password hashes and cannot be recovered. Rotate a credential by creating a new client and revoking the previous client.