ENH: Reauth automatically if the requested scopes are more than the cached credentials has

[tswast]

I think there's a flow to request additional scopes beyond those that a saved credential already has. We could use that flow in this case.