IUserDescriptor is a Dali thing, and this would create an dependency between dali and the security manager. I am inclined to leave it as it is unless you feel strongly about it