- Load OAuthClient#roles list
- Expose grantTypes, redirectUris, scopes
- OAuthClient#apply only copies simple properties, lists and sets must be done manually.
- On update, flatten() was not executed