Function session_row_scopes 

pub fn session_row_scopes(auth: Option<&AuthContext>) -> BTreeSet<String>

The row scopes a verified session may read: its row_scopes claim, without empty ids. Empty for a session without the claim or without authentication.