// XXX: Should we throw an error if a client is registered as a
// web application but requests the pin based workflow? For now I'm
// XXX: Should we throw an error if a client is registered as a
// web application but requests the pin based workflow? For now I'm