Expect the OAuth2 endpoints at the conformance.security level