Caller Identity, Scopes, And Model Allowlisting