test only
grab client credentials from outside source
re-hack error handling to support non-500 faults