Don't ask for extra token permissions when possible

[smacker]

Discussion started here: https://github.com/src-d/sourced-ce/pull/75/files#r295922705

We don't have any solution for it now but I hope we could discuss it later and improve the documentation.