If this were optional I would prefer it to be a setter. Though, I'm +0 on making SecurityContext optional, in I think the security component is inevitable in most cases.