TFJ-838 ability to specify oauth2 scope