[gh-51]: added flag to DefaultAuthorizationEquestManager to hide valid scopes by default from client