Add OAuth2 scopes as const to client definition