should we call this app-indexing thing "client_id" to avoid confusion with human-indexing fxa-auth-server account identifiers?