services.kanidm.provision.systems.oauth2.<name>.public

Whether this is a public client (enforces PKCE, doesn't use a basic secret)