Soteria makes an assumption that there is only a single CallbackHandler - as Elytron has a CallbackHandler instance per ServerAuthenticationContext this can lead to corruption.

To avoid this we can wrap the ServerAuthConfig and ServerAuthContext to ensure the real CallbackHandler is associated using a ThreadLocal.