A failed client authentication should return invalid_client, see http://tools.ietf.org/html/rfc6749#section-5.2