<security-manager ... version="2.0">
    ...
    <events script-uri="/db/security-events.xq"/>
    ...
</security-manager>