client keys are required in apps