high level formatting refresh
Update isolated/private OIDC options and their TLS/SSRF security implications
docs: document the standalone IAM service