diff --git a/.taskcluster.yml b/.taskcluster.yml
index ea5ec22b617..139032333b1 100644
--- a/.taskcluster.yml
+++ b/.taskcluster.yml
@@ -17,7 +17,7 @@ tasks:
         owner: ${event.pusher.name}@users.noreply.github.com
         source: ${event.compare}
       scopes:
-        - "queue:create-task:aws-provisioner-v1/github-worker"
+        - "queue:create-task:highest:aws-provisioner-v1/servo-*"
         - "docker-worker:cache:cargo-registry-cache"
         - "docker-worker:cache:cargo-git-cache"
 
diff --git a/decision-task/run.py b/decision-task/run.py
index 7626131f681..7f735a36035 100644
--- a/decision-task/run.py
+++ b/decision-task/run.py
@@ -24,7 +24,11 @@ def create_task(name, command, artifacts=None, dependencies=None, env=None, cach
         "dependencies": [decision_task_id] + (dependencies or []),
         "schedulerId": "taskcluster-github",
         "provisionerId": "aws-provisioner-v1",
+
+        # Granted scope queue:create-task:highest:aws-provisioner-v1/servo-*
+        # to role repo:github.com/servo/servo-taskcluster-experiments:branch:master
         "workerType": "servo-docker-worker",
+
         "created": taskcluster.fromNowJSON(""),
         "deadline": taskcluster.fromNowJSON("1 hour"),
         "metadata": {