Exactly, there is no central auth. We don't even have a time chain to verify that some things came after other things which oauth just assumes it exists.