allow configuring the keys after `__init__`

This lets us set up the Flask app in a `create_app()` function and push the
secrets into the OAuthRemoteApp once they've been loaded from the
configuration.