Yeah it would have to be some kind of browser redirect dance using stuff like oauth. The current system of generating keys and setting custom permissions will

Yeah it would have to be some kind of browser redirect dance using stuff like oauth. The current system of generating keys and setting custom permissions will leave room for error.