o.c.sec: Explain how to add custom AuthorizationProvider