username and password; the client registers using the returned sip_uri and can
then place and receive calls. The password is returned once — at create, and again on rotate — and
is never returned by the list or get endpoints.
Provision a client on demand and delete it when you are done, or set expires_in_seconds so it is
cleaned up automatically. Each domain has a limit on the number of clients it can register.