HTTP Message Signing and OAuth PoP
https://www.ietf.org/archive/id/draft-ietf-httpbis-message-signatures-04.html