Awesome, let us know if you run into any issues, or have suggestions - we're here to help. You can reach me directly at marc@stoplight.io.
Also, I define the OAuth2 security in the version, but it shows up nowhere else except for the exports. It would be nice if you define which resources are secured by what. For instance all of my resources require apikey as well as an OAuth2 token.
In the "settings" tab for each endpoint, you can mark which security schemes apply to the endpoint. It's kind of hidden, we're moving it to the general definition tab. Also, that info will be exposed in api-docs (which security schemes an endpoint requires/supports) in an update later this week!