Support server scope

We should provide a means to deal with different scopes, e.g. when a request is in server scope (request.auth.credentials.scopes contains 'server') - or whatever define in the options as server scope - then we should have more detailed results available.
