docs: @JsonIgnore
      public void validate(final CommonProfile profile) {
          if (StringUtils.isBlank(getClientId())) {
              throw new InvalidResourceSetException(HttpStatus.BAD_REQUEST.value(), "Authentication request does contain a client id");
          }
  
          if (getScopes().isEmpty()) {
              throw new InvalidResourceSetException(HttpStatus.BAD_REQUEST.value(), "Resource set registration is missing scopes");
          }
  
          if (!getOwner().equals(profile.getId())) {
              throw new InvalidResourceSetException(HttpStatus.FORBIDDEN.value(), "Resource-set owner does not match the authenticated profile");
          }
      }