Out of interest - why lazy load the `security.context`? Scope?