it seems keys aren't being generated per-client if the post is explaining the whole thing... kindof the equivalent of 'basicauth' with one password