anchor.diff:  ```
   quarkus.oidc-client.auth-server-url=${keycloak.url}/realms/quarkus/
   quarkus.oidc-client.client-id=quarkus-app
  -quarkus.oidc.tenant-1.credentials.client-secret.value=mysecret
  -quarkus.oidc.tenant-1.credentials.client-secret.method=post
  +quarkus.oidc-client.credentials.client-secret.value=mysecret
  +quarkus.oidc-client.credentials.client-secret.method=post
   ```
   
   `client_secret_jwt`:
  
positive.code:     public String getResponse() {
          
          Tokens tokens = currentTokens;
          if (tokens.isAccessTokenExpired) {
              tokens = client.refreshTokens(tokens.getRefreshToken().await.indefinitely();
              currentTokens = tokens;
          } 
          // use tokens.getAccessToken() to configure MP RestClient Authorization header/etc
  
negative.code: 
  === OidcClients
  
  `io.quarkus.oidc.client.OidcClients` is a container of `OidcClient`s - it includes a default `OidcClient` (which can also be injected directly as described above) and named clients which can be configured like this:
  
  ```
  quarkus.oidc-client.client-enabled=false
  