Allow overridable scope, just auto-redirect to authorization prompt