Ensure that clients can only be granted pre-approved scopes.