If the bot has the ability to type commands, like /msg #anotherchannel .ban name from #channel that wouldn’t be good. (if the user pulls the oauth out of it, it could create a session as that bot and cause havoc in any channel it’s modded in)
Your bot could ask for an oauth input for that user or do a login with twitch auth window to pull the users oauth, So it doesn’t have to be a shared account.