The multiplex guide now says client_cert/client_key are part of the "same credentials" test and states the OAuth rule as its own sentence; the MCP config reference names the per-profile token directory and the never-shared-across-profiles rule next to the OAuth behaviour list. Co-authored-by: ly6751 <99090550+ly6751@users.noreply.github.com>