Security Realm - authorization validation

Currently we have a validation step to check the consistency of the authentication definitions, we need two additional checks: -
1 - Only a single child of authorization should be defined.
2 - Only one group search should be defined on authorization=ldap