If I used the scope as sp:scopes:default, I got the same response as you did. I tried a number of combinations and found that idn:requestable-objects:read would provide a response for the user when they had no other scopes set. I think this is a documentation error.