# enabling persistent ATO via client_credentials without further admin access. # Impact: Raw client secrets + full user PII dump + account takeover ...