The current test matrix is utilizing an OAuth client with legacy scopes, we should add testing using an OAuth client that has the new minimal more granular scopes (e.g., auth_keys).

We should continue to test with the existing OAuth client that has legacy scopes to ensure we do not regress on support for older OAuth clients.