What we need to identify are consequences of OAuthing to someone we don't want to. Anyone have a source on that?