A useful enhancement would be more granular scoping for private app API permissions. For example, instead of granting read access across the entire HubSpot portal, it would be valuable to restrict read permissions to data belonging to a specific HubSpot team only.