mod_http_oauth2: Rudimentary support for scopes (but not really) We don't support limiting access, but this change will inform the client what permissions the created token has (e.g. is the user an admin or not). There is some work in progress on real scope support.

This module lets you block connections to any remote servers not on a
whitelist.

``` {.lua}
s2s_whitelist = {
    "example.org",
}
```