Roll out ACT_AS_USER scope change

@mantadakise apparently faced the same issue five years ago: Is there a way to catch programmatically the invalid_grant error (when the scope is not defined correctly?)
I’m really surprised that nobody else has complained about it since.