Allow client_id and client_secret to be either a string or a proc; the proc is only called when it's required, so you can use secrets that only the rails server can read