OAuth 2.0 Protected Resource Metadata for the Credential Issuer?

[babisRoutis]

I was wondering if it would make sense to state optionally that credential issuer may advertise OAuth 2.0 Protected Resource Metadata, in addition to credential issuer metadata.

• In VCI scope is an optional attribute of a credential_configuration. If not provided, the wallet has a single - implied -option to use authorization_details, in authorization code grant. Resource metadata would allow the issuer to explicitly define this.
• In VCI there is no option for the credential issuer to express DPoP requirements (required or not, supporter algorithms, DPoP Nonce etc).