This spec was removed previously because it failed on CI when we were
updating the `job_token_scope_enabled` field default from false to true.
It can now be safely re-added with the new default.