drop casb oauth grant export · detect excessive scope grants · runs locally
drop casb oauth grant export · local only
heuristic screener · vendor schema varies · not definitive proof