https://adityasingh-lab.github.io/posts/apim-client-cred-advance-scope-check/