OAuth2, OIDC, JWT, mTLS via plugins ()