`admin` scope has been required by default for more than a year now
and all apps that use the API seems to request a proper scope by now.