It's not an OAuth provider, and something along those lines would be a very good idea. Have you got time to drop a quick mail to AD&T on the subject, and see what the other senior coders think?

An API would also be great - do you have any idea how to start exposing it like that?