- Allow for blank secret if client doesn't use client_credentials grant
- Updating the Client maintains original secret
- Client#roles converted to a Set