Using and external AuthZ provider

[mvandenb]

Working in an enterprise scenario (multiple apps, single source of authZ), it'd be useful to see examples of how you'd plug in an external authorization provider to work with the new policy based authorization filter. Would you do it via middleware or are there existing extension points in the framework?