I propose we remove the option to enable/disable direct grant and always have it on. Alternatively we need an option to enable it without using the admin console. This is for users that want to use a CLI, or needs to do some automatic configuration when provisioning a KC.