Client configuration for developers

[marksparkza]

Developers should be able to create and manage clients with which they work.

Possible changes to support this:

• role.client_id - if set, role applies only to that client
• client:config scope
• non-admin client create/update routes
• scope create/update/delete routes for ‘client’ scopes

The only properties of a client that are off-limits are linked ODP collections and ODP scopes. Note that this might be an indication of the need for a broader redesign. Consider the possible unbundling of the identity service and how that would affect this requirement.