1. Query 'scope=system' and 'system=true' is neccessary when fetching all users
or groups from Keystone.
Without these, users and groups in other domains (non-caller domains),
as well as system-level users, cannot be detected.
2. Query 'scope=system' is neccessary when fetching all project from Keystone.