[snarfed]ah ok. yeah then this is the standard tradeoff. either you manage a single twitter app (client id/secret) yourself, which they have to trust, or they make a twitter app themselves, which doesn't require trust, but is much more difficult for the average user
