Refactor CFAdmin to honor scoped admin

Original change: http://reviews.cloudfoundry.org/#/c/13224/