Search API returns only users that registered for the calling app

ApplicationUsers can only be created by apps acting for users (according to doorkeeper)
App and User are detected automatically
Search returns only users that registered for the calling app
Specs