Adding a new OAuth scope to an existing credentials block — what happens to existing authenticated users?

I have a credentials block configured in my automation with scope x. I'm adding a new automation block that requires an additional scope y, so the combined scopes are now x y.

New sign-ins will correctly receive the x y scope. However, users who previously authenticated only have the x scope stored.

My question: When one of those existing automations runs for a user with only the x scope, what happens?

• Does the OAuth token refresh using the original x scope and continue to work?
• Or does it attempt a refresh with the new x y scope, fail due to the mismatch, and break the automation?

Follow-up: If existing users do need to re-authenticate, what's the recommended way to surface that to them — is there a built-in mechanism in monday.com for prompting re-auth, or does that need to be handled manually?