We should consider disabling `device_code` grant by default. Currently, it's enabled in the default configuration. Related gh-1454
