Securing the collector - agent config

agent-with-oauth2client.yaml

extensions:
  oauth2client:
    client_id: agent
    client_secret: Dl76n1p8P2SEdqhcyfcqtmNJi8Kf5LG3
    token_url: http://localhost:8080/auth/realms/opentelemetry/protocol/openid-connect/token

receivers:
  otlp:
    protocols:
      grpc:

processors:

exporters:
  otlp:
    endpoint: https://localhost:4318
    tls:
      ca_file: /tmp/certs/ca.pem
    auth:
      authenticator: oauth2client

service:
  telemetry:
    metrics:
      address: :8988
  extensions: [oauth2client]
  pipelines:
    traces/agent:
      receivers: [otlp]
      processors: []
      exporters: [otlp]

In agents, where should we use this?
Example for java agent, where should we use this...

This is for the OpenTelemetry Collector deployed as an agent, not for Java Agents.