`oaut_token_required` should be part of the interface now, as declared below?