OAuth extension binding access tokens to specific client key pairs. Prevents token theft and replay attacks by proving possession of a private key.