verifyClientRegistration relies on verifyAccessToken to provide claims on the request upstream