Changing an app's requested OAuth scopes is a configuration step
Changing an app's requested OAuth scopes is a configuration step, not proof that an already installed token has lost a permission. For a no-write rollout, first disable the sender in deployed code, then reinstall or rotate the app authorization and verify the effective scopes bef…