How should client credentials be set up?

These threads might help