Optional support for using OAuth2 client secret or certs for JWS/JWE