On the distinction between scopes and claims: https://nat.sakimura.org/2012/01/26/scopes-and-claims-in-openid-connect/