This may cause problems if a security manager is present, if any of the SecurityContextAssociation methods are called with user code on the call stack (which I think they will be, as they are run inside the interceptor chain).