When using JWT for authorization there exists a scopes claim that is authorizing the JWT owner for a set of features. What is the best practice here when we tal
scopes