Should be validated as per http://openid.net/specs/openid-connect-registration-1_0-20.html#Security
Should be validated as per http://openid.net/specs/openid-connect-registration-1_0-20.html#Security