How to implement Oauth2 auth for different hosts on one kong instance?

Questions
1

There any possibilities to configure oauth2 for differnet hosts?
for example:
api-gw-dev.com /api1
/api2
and:
api-gw-qa.com /api1
/api2

oauth2 plugin configured on routes, with gloabal_credentials to provide one auth point for all apis.
So when I do request to dev I got a valid token for both -dev and qa.
Can I configure it to have independent code? (code from dev not valid on qa, qa not valid for dev) ?

2

Question not valid for now.
For this purposes can be used ACL plugin, and divide consumers by different groups (for api1, api2)