`valid_api_token?` is a better name. Scopes are just (potentially) one facet of
a "valid" token.