needs a concept of client running on a particular machine

If I look in https://edge.launchpad.net/~mbp/+oauth-tokens then I see several different copies of various applications, authorized at various times.

Some of these are just stale, but sometimes I really do need multiple authorizations of bzr or hydrazine because I run them on different machines. This ought to be handled somehow in lplib and launchpad (or at least documented)

What I would expect to see is

  Hydrazine (on grace), authorized 2010-01-01 ...

obviously you can hack around this by putting it into the user-agent string but that seems a bit gross.

If my laptop is stolen I want to revoke all the credentials that were issued to it, no more and no less.

This might slightly relate to the credential-management stuff in https://bugs.edge.launchpad.net/launchpadlib/+bug/532055