How do credentials work to access user data with the right permissions? Is there a way to integrate OAuth flows via Slack, for instance?