When using PAT to perform gh auth login, gh says that "The minimum required scopes are 'repo', 'read:org', 'admin:public_key'.". It is not clear which options these short names correspond to in the list of permissions shown when generating a PAT. See attached image.

Because the correspondence is not clear, it's furthermore not clear how to create a PAT with the minimum scopes - instead, I have to use all scopes.