We have a number of internal and external applications that use OIDC for authentication. These applications are a mixture of Public Clients (i.e. no client secret should be used) and "trusted" Clients (i.e. they require both a client id and client se...