This can more appropriately be `client_id`, as that is the only information ever required to grant an access token.  Also, let's add typehinting for `scopeUtil` and `request`, and put `request` before `scopeUtil`.