i've checked that the model can work for mutations, where you "log into" every component origin that needs oauth. don't want the "browser" to have any permissions beyond its own needs this works but you need some way to invalidate a partial tree after mutation. expectations around this are subtle