The client cannot create an Oauth token. The client can only request such a token from an Oauth server. There is ambiguity here between the role of the CDS client and Oauth server.

Existing Wording:

With CDS Hooks, if the CDS Client wants to provide the CDS Service direct access to FHIR resources, the CDS Client creates an access token prior to invoking the CDS Service

Proposed Wording:

With CDS Hooks, if the CDS Client wants to provide the CDS Service direct access to FHIR resources, the CDS Client obtains an access token prior to invoking the CDS Service