Add allowed_scopes to all authenticators to allow some users based on granted scopes
#799
| Job | Run time |
|---|---|
| 27s | |
| 23s | |
| 22s | |
| 20s | |
| 27s | |
| 1m 59s |