sonatype/security is common library that at least in theory is usable in many products. as such, it should not contain any product specific code. if this class is nexus specific, it should be moved to nexus sourcetree. if this class is not specific, it should have better name that reflects what it actually is.