Allow use of hashed OpenID Connect client secrets.
This allows for advanced filtering of the query parameters in ACL's. Closes #2708