The great thing about OAuth is that you can revoke access after the fact. At least Greplin doesn't ask for your username and password when it's not necessary.