It expands the personal access key feature (
story #12266), when using Git over HTTP the user can give an access key instead of a password.
* When creating a new personal access key the user can chose what the access key will give access to (REST, Git repository, everything)
* The scope of the newly created access key is mentioned in the mail notification sent when a new access key is created