o.c.sec: ScriptAuthorizationProvider