Add allowed_scopes to all authenticators to allow some users based on granted scopes
#800
| Job | Run time |
|---|---|
| 24s | |
| 26s | |
| 22s | |
| 20s | |
| 29s | |
| 2m 1s |