ClientBuilder should only auto-approve scopes which are specifically configured for auto-approval