mod_http_oauth2: Include 'amr' claim in ID Token This essentially just says "password authentication was used". This field could later be used to indicate whether e.g. MFA was used.

This module blocks configured queries that change server state.

E.g. to make vCard storage read-only:

``` lua
readonly_stores = {
	vcard = { "vcard-temp", "vCard" };
}
```