The `refresh_token` scope issue is correct, but the `full` scope is the real trap. In Salesforce's model, `full` is functionally a composite of `api` ...

Throttling was the first thing we instrumented. The API client has exponential backoff with jitter baked in, and we use Redis to cache responses per-e...