Security artefacts

• Access - *.access (URL access rules)
• Roles - *.roles (role definitions)
• Client registration - OAuth client registrations