They also asked if they could use OAuth 2.0 instead. My understanding is that for now it's useless for integrations because you need to go through the user consent form every 7 days. Just double checking, this is still the case, right?