Move OAuth requirements into their own section