[#1478] OAuth admin tweaks: enforced OAuth admin scopes usage by default, migrated...