ZegnatIt would not surprise me if it goes largely ignored within IndieWeb. Because other specs, like Micropub, already specify they want their authorization handled through Authorization Bearer headers. And if everyone already does that, no need to actually check token type
