I'm not happy with anything that can change to be the primary key. That means `application.name` is completely out of question, IMO, and `oauth_id` can also change in the future, although with the current version of the it does not.