Add support to the keystone devstack plugin for setting enforce_scope in the keystone config and setting up tempest to test it. It may be better to move this to tempest proper at some point. See also: https://review.opendev.org/686073 https://review.opendev.org/698397 Change-Id: I1b71135547b7ce03afb5b44fbbab3f52d213a2ae