config param 'app_perms' changed with 'scope'