pub fn identity_http_client() -> Result<Client, String>
HTTP client with the policy identity lookups (and the token refresh that may precede them) require: no redirects, bounded connect/total timeouts.