I suggest to add possibility to specify permissions for Private App to read and write only some specific custom object. For now I see only crm.objects.custom scope which works for the whole group of custom objects.
It would be nice to be able to permit Private App to interract only with a specific custom object.
+1. We use multiple custom objects that have wildly different uses (e.g. survey responses vs. offline events) that we connect to other platforms. Need to be able to grant permissions by object type.