Which ever is most appropriate for your use case
You can generate one using the ClientID and client secret as documented