The problem is the activitypub and Oauth are two very different ideas… one is so posts from one server show up on another and one is who are you?

How would you store and trust private keys?