In keycloak u have the option to configure client authentication as "Signed Jwt with Client Secret". Would be great if this was supported. 