https://github.com/remotestorage/spec/blob/main/release/draft-dejong-remotestorage-24.txt, in section "9. Bearer tokens and access control", says
These access
scopes are represented as strings of the form ,
where the string SHOULD be lower-case alphanumerical, other
than the reserved word 'public', and can be ':r' or ':rw'.
So it appears that dashes are not a legal part of scope names
https://github.com/remotestorage/spec/blob/main/release/draft-dejong-remotestorage-24.txt, in section "9. Bearer tokens and access control", says
These access
scopes are represented as strings of the form ,
where the string SHOULD be lower-case alphanumerical, other
than the reserved word 'public', and can be ':r' or ':rw'.
So it appears that dashes are not a legal part of scope names