user expects to not give so many permissions with github

https://developer.github.com/v3/oauth/#scopes