anchor.diff:          // use tokens.getAccessToken() to configure MP RestClient Authorization header/etc
       }
   }
  -```
  +----
   
   === Use OidcClient in MicroProfile RestClient client filter
   
   `quarkus-oidc-client-filter` extension provides `io.quarkus.oidc.client.filter.OidcClientRequestFilter` JAX-RS ClientRequestFilter which uses `OidcClient` to acquire the access token, refresh it if needed, and set it as an HTTP `Authorization` `Bearer` scheme value.
   
  -By default this filter will get `OidcClient` to acquire the first pair of access and refresh tokens at its initialization time. If the access tokens are short lived and refresh tokens are not available then the token acquisition should be delayed with `quarkus.oidc-client.early-tokens-acquisition=false`.
  +By default, this filter will get `OidcClient` to acquire the first pair of access and refresh tokens at its initialization time. If the access tokens are short-lived and refresh tokens are not available then the token acquisition should be delayed with `quarkus.oidc-client.early-tokens-acquisition=false`.
   
   You can selectively register `OidcClientRequestFilter` by using either `io.quarkus.oidc.client.filter.OidcClientFilter` or `org.eclipse.microprofile.rest.client.annotation.RegisterProvider` annotations:
   
  -```
  +[source,java]
  +----
   import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
   import io.quarkus.oidc.client.filter.OidcClientFilter;
   
  
positive.code: 
  `io.quarkus.oidc.client.OidcClients` is a container of `OidcClient`s - it includes a default `OidcClient` (which can also be injected directly as described above) and named clients which can be configured like this:
  
  ```
  quarkus.oidc-client.client-enabled=false
  
  quarkus.oidc-client.jwt-secret.auth-server-url=${keycloak.url}/realms/quarkus2/
  quarkus.oidc-client.jwt-secret.client-id=quarkus-app
  quarkus.oidc-client.jwt-secret.credentials.jwt.secret=AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow
  ```
  
  Note in this case the default client is disabled with a `client-enabled=false` property. The `jwt-secret` client can be accessed like this:
  
  
negative.code: 
  You can selectively register `AccessTokenRequestFilter` by using either `io.quarkus.oidc.token.propagation.AccessToken` or `org.eclipse.microprofile.rest.client.annotation.RegisterProvider`, for example:
  
  [source,java]
  ----
  import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
  import io.quarkus.oidc.token.propagation.TokenCredential;
  
  