The scope to request when (re-)authorizing (SEP-835 step-up): the challenge scope= when advertised, else the PRM scopes_supported.
scope=
scopes_supported
final List<String> stepUpScopes;