Merge in change from CWF 2.x - CWI-1151 - Do not pass SecurityContext to child threads in a thread pool environment, especially without ensuring the clearing of values after execution.  Pass/inject as parameter/dependency