[WG-UMA] Applicability of OAuth 2.0 hack to UMA?