Add the possibility to block any access to the standard authenticator

Add the possibility to connect only with OIDC (so forbidding anything that might end up in the standard authenticator, like oidc.skipped or the BASIC auth).

An admin who needs to enable superadmin access (to fix some problem, for example) would have to allow back OIDC skipping.