OAuth Isn't Enough for Agents | Dark Hacker News