Combine required Globus credentials?

[bstrdsmkr]

Is your feature request related to a problem? Please describe

Deploying Metagrid currently requires two separate sets of Globus credentials, one "thick client" for the frontend and one "confidential client" for the backend. It's not clear to me why exactly both are required.

Describe the solution you'd like

If possible, reducing to a single set of backend credentials would simplify deployment and likely reduce code footprint

Describe alternatives you've considered

If it's not possible to use a single credential, we need to document why both are necessary and what doesn't work when one is not supplied

Additional context

[sashakames]

We could investigate using the Django backend token for transfers and that would alleviate the need for the native app credential.

[sashakames]

Reach out to Globus team perhaps @sturoscy-personal ?