On the Nature of OAuth2’s Scopes | Hacker News Reader