This enforces OIDC client registration, meaning we will need a configurable authentication server in Cristal