#[tantek]IMO it's both confusing and in general undesirable and unnecessary. E.g. The OAuth model grants certain "access" to OAuth client apps and nowhere in any explanations of those OAuth flows did they ever have to pretend that a client app was a "person"