Here's the problem!!!

And it may be a conceptual one primarily.

The question is: should a given `client_id` allow *both* private *and* public access, or only one or the other?

I had been assuming that both were allowed, and so I have a `client_secret` in my database. However, if that's not the case, it's easy enough to change. I'm interested to hear you weigh in, however.