Based on several discussions (MNG-6772, MNG-6397) the topic of repo scoping causes a lot of confusion.
Create an IT which shows that repositories defined in a reactor are never available (inject) to download imported dependency BOMs. Thus all repos are properly scoped.