Backwards compatibility has been broken on the public handleCallbacks methods so this needs to be fixed.

However this class should not really be a public API, it has been picked up in the package as we have the AuthenticationMechanismException which does need to be public.

The entire class should be deprecated and the impl moved to a private package.