How about - "A Group authority MUST and consist of two Agents which represent an application and user and  use 3-legged OAuth"