I am creating an app which needs to subscribe to 'orders/create' and other order based events, but does not need any sensitive customer data. Basically, I need order id, product and timestamps. What is the best way to configure app_scope for such a s...