Fuck Oauth. Tbs, I believe you can do it through a non-standard client cert. PKCS certs support many types of algos, even if the internet seems to typically stick to only 1/2. I’ll look at it later.