So basically oauth-style app connections. Makes sense.