What this test does

Requests a scope that was not originally granted.

How it passes

The refresh is refused, or the new token does not include the extra scope.

Specification
§5.5, RFC 6749 §6
Needs
S501 Refreshes an access token