On the Nature of OAuth2’s Scopes | Dark Hacker News