I am using identityserver4 A to authenticate clients and users of website B and everything works well but now I need to allow those users to request their secret keys which stor