I know the static analyser is not perfect and is only meant to highlight areas to look at but several of the memory leaks it has highlighted seem valid, however as I am currently struggling to get the OAToken_KeychainExtensions to work and also struggling to access protected resources after getting both keys I cannot begin testing this.

Perhaps its worth looking into.