fn validate_realm(realm: &str, strict: bool) -> Result<Url, &'static str>Expand description
A token endpoint is only used if it is an https URL, with no credentials in
it and no unusual port, to a host that is not a local or private name or
address. strict = false is for tests only.