add proper support for auth scopes

[proppy]

Instead of always asking for all the scopes at the same type.

[dhermes]

@proppy What did you have in mind here?

[dhermes]

Closing in favor of JJ's TODO which became #154. (Will expand the TODO outside of the storage package.)

LMK if this is the wrong thing to do and we can re-open.