Allow for queries with filters that subset the scoped key.

Modify the scoped key enforcement logic to allow for filters in the
query that are subsets of those in the scoped key.

For example, you can now create a scoped key for multiple applications
and then do a request for a single application.