Turns out that for some peculiar reason, the 'send' scope is not enough to send email and the full 'mail.google.com' scope is required.
This makes it possible to reuse the lieer tokens for sending emails from XOAUTH2-compatible SMTP clients.