Add complex scope constraint for AccessToken.verify