Somewhere in the DB we'll need to associate the Apis that a client is allowed to use with their client id.