Use nested class for OAuth config