I agree with @mrvisser, for every endpoint that we expose, we should have an impl in oae-rest.

I'm fairly ambivalent where these go, but RestAdminAPI seems like a good choice.