Add cloud_controller_service_permissions.read scope to uaa clients created during broker registration