@mtoniato if you've confirmed the client credentials flow is working, does it allow you to have a password protected private key? Or must the private key be unprotected (other than file permissions)?