Default socpes and policy handled by clients

* Clients can override the default scopes and scope policy defined by
the application
* Tests updated