Hey @User thanks for replying. Also yes, I understand these security factors. I have been very hesitant to implement this even under significant user pressure (I don't think implementing things just because someone wants it or "other apps implement this" is a sound implementation plan). My main concern is if the spec permitted implicit consent. If you think asking on a GitHub issue is fine for a spec question when I'm only using fosite not hydra/kratos I will.