lots of small fixes, also partial runner script for stored client creds