o.c.sec: Extension point for AuthorizationProvider