The documentation was a bit misleading because it listed projects,
domains, and the system as not being optional. This is confusing
because it's not possible to scope a token to more than one target.
This commit attempts to clarify those details.
Closes-Bug: 1774229
Change-Id: I27fb15e2b53529b91c0f2bd3a2744d60b54495c8