RemoteAuthenticationService injected into DefaultHttpClientFactory is created every 2min

[danroth27]

Originally reported by @ascott18:

#40764 (comment)

Another problem I just ran into:

• RemoteAuthenticationService is a scoped service that implements IAccessTokenProvider.
• IAccessTokenProvider is injected into a transient service AuthorizationMessageHandler (and its derivatives like BaseAddressAuthorizationMessageHandler).
• AuthorizationMessageHandler instances are requested dynamically from a singleton service (DefaultHttpClientFactory). Because this is dynamic, it is not caught by static scope validation via ValidateScopes when building the service collection.
• Ergo, a scoped service (RemoteAuthenticationService) is being injected into a singleton (DefaultHttpClientFactory), which is causing multiple instances of RemoteAuthenticationService to be created. In this case, a new instance is made every 2 minutes.