We can add or delete oauth2 clients using the register-api-client and delete-oauth2-client command line, but there doesn't appear to be a way to edit the scopes associated with an account, or to generate a new client secret. Editing the scopes would be particularly useful since it's not uncommon for a client to start out using one set of APIs and then gradually expand and use others.