NewAdminService creates a new AdminService.

NewLocalClient creates a admin client that reads and writes from the provided config and secret managers.

ShouldUseLocalClient returns whether a local admin client should be used based on the admin service client and the endpoint.

Client standardizes an common interface between the AdminService as accessed via gRPC and a purely-local variant that doesn't require a running controller to access.