The SecurityInterceptors all have the same code in both invoke and invokeHome methods (except for getNext().invokexxx). Any change to the interceptors need to happen in both the methods. So refactor the common code into a separate method.