Document scopes, add guards, and test that keys cannot access resources outside their assigned permissions.
Document scopes, add guards, and test that keys cannot access resources outside their assigned permissions.