OAI 3.2.0 defines a new field on the flows object deviceAuthorization (OpenAPIOauthFlow?)
We should add the new field, and implement serialization/deserialization for it.
For OpenAPI 3.1.0, we should serialize with an x-oai- prefix to make it an extension