OAuthScopesPlug: remove transform_scopes in favor of explicit admin scope definitions