@Configuration
@Lazy
public class SecurityConfig
extends Object
Configures ResourceServerTokenServices which takes authorities from the 'scope' field in the access token.
Default implementation ignores that field and we cannot use global method security.