Document thread actions

We only need the OAuth secret here (not the OAuth token)