KEYCLOAK-569 Check application roles for scope