There are no constraints; it wasn't clear if there would be a central QNAM that should be used or if the code should be usable without. It seems the simplest solution is to enforce having a QNAM passed to OAuth.