We should not implicitly request tokens of a specific scope in this method, especially not a token carrying the god scope. There will be plenty of use cases where a client will request an application access token carrying the organization scope.