The JavaDoc in `CurrentSecurityContext` states that it's for resolving an `Authentication`, when really it's for resolving a `SecurityContext`.