API credentials for clients in a multi-tenant setup

Hi @subtlestag,

Issuing client credentials would be the OAuth2 way to handle this scenario. Returning a token would require a set of credentials.