Add OAuth2 Audience check to reference config
At KIT we also check the audience of the OAuth2 token supplied by the user. This way, we are certain that the user got the token via the correct "client" and the configured logic for LSDF OS has passed.
This change still should be reflected in the reference config.
/cc @Sven.Siebler /cc @cw296