WTH can't I set permissions on a long-lived access token?

Month of "What the heck?!"
2

Kind of late but you might want to take a look at varco or this discussion