Add in a scim.create scope that can only create users, nothing else.

[#79295442] https://www.pivotaltracker.com/story/show/79295442