Include the client key in the /assertion response