don't allow half-assed opauth records (such as errors)