Copy schema from php-leop/oauth2-server
Add caveat