Did delicious/flickr/Upcoming/etc era APIs require app key and secret? Was access revokable? #indieweb