Leftover copies from 120719f28; the router uses the OAuth ones. The token copy still skipped the OAuth scope check.
120719f28