Undocumented client authorization keys
Undocumented client authorization keys

`aud` was left entirely undocumented and `sub` required someone to read a small detail of the jwt-bearer spec.
OADA/oada-docs,OADA/oada-docs