mod_http_oauth2: Include all granted roles in scopes The client is allowed to request a subset of granted scopes, so it makes sense to record all granted roles so that another could be selected at access token issuance.

This module lets you block connections to remote servers at the s2s
level.

``` {.lua}
modules_enabled = {
    -- other modules --
    "s2s_blacklist",

}
s2s_blacklist = {
    "proxy.eu.jabber.org",
}
```