Sounds fine. I'll update the error message in require_oauth as well to make it clear for any clients what needs to be set.