sessions: add scopes for acls, default to "ubus" scope