It's mildly unpractical to have two separate clients that both need to be instantiated with secrets and keep track of their own token lifetimes. We may want to put this in one class, since the API surface of either is not that large.