Support OAuth2 token scopes and notes.