theres no oauth here, why call it that? its a single source local ephemeral key manager

or have i missed something entirely?