Issue #12 - OAuth policy: apply OAuth policy to a resource or api.