Can we get access token without requesting profile and email?

[angjelkom]

When using the google client on web to request contacts and calendar api using:
"https://www.googleapis.com/auth/contacts"
"https://www.googleapis.com/auth/calendar.readonly"

only those scopes get asked by the end user, but when using this plugin it asks the top three greyed out scopes:

How can we avoid this, because we only need to read events and contacts, asking user any extra unneeded permission would discourage end user?