Add constraints to oauth2 sources