I am using Supabase edge functions to access a 3rd party API that requires OAuth. I am just using the client credentials flow, so my edge functions have access to environment variables containing my client ID/secret for the 3rd party API. My questions: