Allow only client secret oauth strategy