public-oidc
Since any OIDC redirects will need to ensure https, move their common patch to a template layer.