I've also implemented this in my Micropub server:

• when creating a post, and the draft scope is present, the post-status is forced to draft (even if it's set otherwise in the post)
• when updating a post, and the draft scope is present, the update is only allowed when updating a draft post, otherwise returns insufficient_scope
• delete/undelete returns insufficient_scope when the draft scope is present