Add per-client grant types

Certain use cases (like a publicly distributed CLI) require open clients (no client secret).
It makes sense to limit the grant types and scopes available to such clients.

This issue is about limiting the grant types.