Filter the scopes from the GrantType by the ones allowed by the Client