IMO both client identification and auth should be done only once - per service initialization - since it's service specific.