So we have two oauth.Config situations. One is the client behaviour (ClientConfig) to make API calls. The other is for actual authorization (AuthConfig). The second one requires the access type, redirect uri, and scope. I guess it doesn't hurt to use the superset for both.