[signon-plugin-oauth2] Relax restrictions on ProvidedTokens