Let's actually check that the scope keys are what we expect them to be. Since we're testing the API, we should check the `_scope_keys` attribute instead of `scope_keys`.