Allow users to give us a signed OAuth file in lieu of their client secrets