exposing Client type from server package
auth abstraction