[WG-UMA] Issue #278: Clients, credentials, client types, and security considerations