Filtering keys based on posisble scopes.

`key in (project, config, otherKey)` is viable, so we filter scoped keys using the passed in KeyFilter.  Part of the "discovery" API.