ZegnatNote that scopes were not even included in the first version of Selfauth, because it was just for authentication. So in a world where IndieAuth is moving to even closer to zero stand-alone token endpoints than today, maybe Selfauth is moving towards overall deprecation anyway...
