#aaronpki'm pretty sure that if you trust your authorization server (which you obviously do since you delegated to it) then you could trust it to generate auth codes on your behalf even if you are not in front of the keyboard, which can be used for server-server auth