Only grant_type=password need special handling, per backend system.