diff --git a/keycloak/client-create b/keycloak/client-create
index eee36e7..12c250d 100755
--- a/keycloak/client-create
+++ b/keycloak/client-create
@@ -8,11 +8,12 @@ source ../env.production || die "no top levle env?"
 source env.production || die "no local env?"
 source "../data/keycloak/env.secrets" || die "no local secrets?"
 
-sudo docker-compose exec -T keycloak \
+docker-compose exec -T keycloak \
   /opt/keycloak/bin/kcadm.sh \
   create clients \
   --server http://localhost:8080/ \
   --user admin \
+  --realm master \
   --password "$KEYCLOAK_ADMIN_PASSWORD" \
   -r "$REALM" \
   -f - \
diff --git a/keycloak/client-delete b/keycloak/client-delete
index 0af8a3f..8d4f46d 100755
--- a/keycloak/client-delete
+++ b/keycloak/client-delete
@@ -20,6 +20,7 @@ CLIENT_ID="$(docker-compose exec -T keycloak \
   --server http://localhost:8080/ \
   --user admin \
   --password "$KEYCLOAK_ADMIN_PASSWORD" \
+  --realm master \
   -r "$REALM" \
 | jq -r ".[] | select( .clientId == \"$CLIENT_NAME\" ).id")"
 
@@ -33,6 +34,7 @@ docker-compose exec -T keycloak \
   delete "clients/$CLIENT_ID" \
   --server http://localhost:8080/ \
   --user admin \
+  --realm master \
   --password "$KEYCLOAK_ADMIN_PASSWORD" \
   -r "$REALM" \
   || die "$CLIENT_NAME($CLIENT_ID): unable to remove"