that api is the one to use if you are aiming for bfn or if you want your NetSuite server to be the only one with access to the credentials