For OAuth2 device flow, should we define a "device authorization" element?

[mmccool]

See editor's note in text about this.
Also, might want to use deviceAuthorization instead of device_authorization if we do do it, for consistency.

[farshidtz]

This is a blocker for #929

[mmccool]

Discussed in security call Nov 29, 2021:

• Current text uses the value of "authorization" for the "device authorization" endpoint
• Adding a "device{_a,A}uthorization endpoint would require some additional rules about how that must be used for device flows and authorization must not, which would need extra validation and testing
• Consensus: leave the design as it is (use "authorization" for "device authorization" and delete the editor's note (requires PR).

[mmccool]

@mmccool: make a PR to delete the ed note

[egekorkan]

Call of 15.06: This is solved by using authorization