Client certs for service to service communication. Auth tokens validated by a central entity (a bunch of servers really) for user (mobile apps, etc) to service

Client certs for service to service communication. Auth tokens validated by a central entity (a bunch of servers really) for user (mobile apps, etc) to service communication.