It would be useful to have an example for creating an external security and using that external security in an app server.