for a proof of concept I made an OpenID Connect IDP which looks up the mounted ext filesystems of the authenticating user and passes it through as an OpenID scope