What is the minimum scope for an access token (personal/project)? Unfortunately there is no information about that.