[jgarber]“Space-separated” in URLs could be the plus sign or `%20`. What’s being used in the wild in this specific case of passing `scope` values to an IndieAuth server? I’m seeing the plus sign used more than `%20`, but should the server attempt to account for both? Or more possibilities?
