Update security realm <authorization /> to support multiple definitions.

Complex configuration could result in different methods being used for authentication, as a result we may also need to support multiple sources for loading group membership information.