SSP-1387 Add toggle to show/hide OAuth2 client permissions

Also widen the permissions panel itself a bit to try to avoid
wrapping individual checkbox+label pairs.