The interface shouldn't force what permissions we use. Twice I've been forced to add scopes that my process didn't use. We should be able to bypass this. The error message seem to be sufficient for those who are missing permissions as I discovered when
droplet:create
permissions didn't force me to create
ssh_key:read
.