Client authentication with client secret
Client authentication with JWT signed by client private key