feature oauth: moving keys to plugin config