I am halfway expecting to have them enter clientGUID as well for now. Not sure if I might open source this, so I want to avoid having secrets committed into the repo. And having an app on the user's own machine try to keep a secret from the user has always been a fraught endeavor.
//