With our work on multi-tenancy we want to quickly iterate and run demos.

Against that currently the default --tenant-scope that restricts client certs to just the system tenant is cumbersome.

While tenant scopes are useful, and we like to use them in CC, the CC control plane is generating its TLS certs independently from our CLI code and manages its scopes independently. So we should make the CLI command aid developer productivity instead.

Epic: CRDB-23559

Jira issue: CRDB-24771