aaronpkwell this is the other problem with twitter's API... it requires a client secret (or whatever it was called in oauth 1) which has that exact problem you mention, you can't safely ship software like an ios app or SPA containing that secret cause then other users could abuse it
