[#1427] Initial support for OAuth admin scopes.