- E.g. finding common DPoP algorithms - client_attestation_pop_nonce_required - credential request jwt proof