Reduce auth scope