validate-scope. Checks whether a subset is contained in a list of oauth scopes. Uses code generation to reach better performance.