Per the [issue](https://github.com/tomchristie/django-rest-framework/issues/1765) on DRF, this package should be updated to use oauthlib either directly, or through DOT.