To comply with some future Salesforce authentication enhancements we want to add another value to our AMR Given we are not able to ensure what time of device we are dealing with, we should opt for the `pop` (proof of possession) attribute