Describe the bug
If you create a new proxy provider there are default oauth scopes added under "Advanced protocol settings > Additional scopes" to it.
You are able to (de-)select additional scopes but the default scopes are always being re-added silently.

To Reproduce
Steps to reproduce the behavior:

1. Create proxy provider
2. Try to deselect any of the five default scopes
3. Observe the message "Successfully updated provider."
4. Edit the proxy provider
5. Observer all five default scopes being selected

Expected behavior
Deselected scope should stay deselected.

Screenshots

Logs

Version and Deployment (please complete the following information):

• authentik version: 2025.2.2
• Deployment: helm

Additional context