Default subject type for locally registered (filesystem metadata) OIDC clients

[Cantor, Scott]

Best I can tell it's public by default if the client metadata doesn't say anything, but there's a spot in the code that seems to me to be potentially flipping to pairwise if the client metadata has something other than public or pairwise in it. So it may not be entirely consistent if there's an erroneous value in the metadata, assuming that's not guarded somewhere else.

The SAML metadata case definitely populates "public" in the event of absent or ambiguous input.

The intent is pretty clearly to use public. Obviously subject to filtering rules.

-- Scott