token factory and support for credentials rotation
constant token factory
use client factory and token factory