Hm, good question... I think you will get the contact as part of a response everytime you need it. I guess that's a user-related problem, so it should imho go into the security bundle. I am also not sure how to name it... sulu_user? /cc @chirimoya