Currently the fix for various DoS attack turned out to be an own DoS
attack since it removed the default scopes from the keycloak provider.