[Findit] Use gerric scope instead of email scope to authorize findit to internal buildspec/

appengine/findit/common/auth_util.py

Index: appengine/findit/common/auth_util.py
diff --git a/appengine/findit/common/auth_util.py b/appengine/findit/common/auth_util.py
index e9fe427e9ec6d977c355998b2fb4e9443cf307e5..443ed058e82b64103266e72fa89c89f71294ff41 100644
--- a/appengine/findit/common/auth_util.py
+++ b/appengine/findit/common/auth_util.py
@@ -8,7 +8,7 @@ from google.appengine.api.app_identity import app_identity
 _EMAIL_SCOPE = 'https://www.googleapis.com/auth/userinfo.email'
 
 
-def GetAuthToken():  # pragma: no cover
-  """Gets auth token for requests to swarming server and isolated server."""
-  auth_token, _ = app_identity.get_access_token(_EMAIL_SCOPE)
+def GetAuthToken(scope=_EMAIL_SCOPE):  # pragma: no cover
+  """Gets auth token for requests to hosts that need authorizations."""
+  auth_token, _ = app_identity.get_access_token(scope)
   return auth_token