Oauth uses the whole security scheme.

Holding on to the whole security scheme, we will require more than the
settings data moving forward.
Oauth2 support for Authorization header.