Support for OAuth (if added at all) could be added to API as well

I have implemented twitpic API support for Gimp which made me think of the possibility to add OAuth to API calls as well (assuming that OAuth will be supported). This way, it would not even be necessary to enter a password in the API application, rather you have to copy two tokens or authorize the application via the twitter web page and enter a PIN. This way it may even be possible to support application ids other than twitpic for new applications.