show grants instead of rights
optional
make oauth optional