[WFLY-2143] Security Realm authorization validation.

1 - Validate only one 'authorization' child resources exist.
2 - If authorization=ldap validate that: -
 a - At most one username-to-dn exists.
 b - Exactly one group-search exists.