Should we perhaps load the creds from a file that exists on the policy server, otherwise all clients will have the policy server creds distributed.