How OAuth scopes govern what an app can or can not do on Slack.