btw the code come from here:
http://svn.apache.org/repos/asf/maven/sandbox/trunk/examples/plugins/maven-security-mojo/src/main/resources/META-INF/plexus/components.xml


Btw the configuration file is the default value: if you look the implementation:
http://plexus.codehaus.org/plexus-components/plexus-sec-dispatcher/xref/org/sonatype/plexus/components/sec/dispatcher/DefaultSecDispatcher.html#198
it can be override by -Dsettings.security

So it looks great.
Regards,