Can work with Appbase credentials flow: 1) allows insertion of app key from clientside, 2) secret and public key becomes are now the same, 3) public key can't be changed