added possibility to define a scope in which credentials are contained