Fix typo in security doc
Initial code to map external authorities to scopes
External scopes are not added for client_credentials grants