Hi Thomas,
its a safety belt for our applications to prevent calling external services. Via bpm event scripting you can only call to services that are known by the service discovery. May be its a solution to create a microservice that works like a proxy. The eventscript can call the "proxy-service" and that routes the request to the outside.
best regards