@timhaines 

> They can be (and are) use to retrieve credentials from the respective service, and then those credentials can be stored in other collections.

I'm not following you...  `retrieveCredential` calls `OAuth._retrievePendingCredential` which removes the pending credential from the database and so can only be called once for a credential.  I assumed if you wanted access to the credentials such as the access token you'd get them from the user document after successful login.  Are you doing something different?

> I'd very much like it documented how I can use oauth-encryption for these credentials that don't use the accounts packages.

Can you give an example?  Where are you using oauth without accounts?