How to give M2M credentials without knowing the client secret?