Least-privilege review of requested scopes against an app's purpose