As always, HTTP headers must be latin-1 encoded. Both API client ID and secret only consist of plain ASCII characters.
Make sure to not use underscores in headers, as the serving infrastructure will filter them out. The client id header name is X-TQ-CLIENT-ID, only letters and minus signs.