SecurityContextFactory can be an interface