Security scheme API

Authentication modules should be able to provide security scheme information that would populate the top-level security key, security schemes in the components and also potentially per-route security spec.