I think as Andy said in the previous PR if this is 0-legged do we need anything more than the consumer key/secret if this is just for signing requests?