(untitled)

Realising that I'm actually just building a general purpose OAuth proxy that happens to also encrypt the tokens, and that simplifies a lot of my thought process