[SUITEDEV-2114] check credential scope