The current Authorization interface has both ProtectedResources() and AuthorizationConfigurationHook().

The ProtectedResources() is required to provide the correct information to the Platform Auth, the second function is an optional callback if the component needs it. The AuthorizationConfigurationHook will most likely not be implemented in 99% of the cases so we shouldn't force everyone to return an empty thing.

Split the interface into two pieces.