Actually, I've gone with your suggestion, as changing the default scope gets too messy with associations not working properly.  Auth sources aren't shown in many places, so I think this'll be sufficient.