When a new application signs up, zync creates a client on the sso server (keycloak) with direct access grants disabled. It would be nice if there is an option somewhere (in the ui? or as an environment variable to always enable it?) that would enable direct access grants.