- This module is used for git-over-http, as well as JWT. - The only valid scope here is `api`, currently.