On couple of places in elytron subsystem raw oids are expected from user input, e.g. 2.5.4.4 . Is there chance some aliasing could be introduced? So for example human readable "surname" can be used?

• kerberos-security-factory
  • mechanism-oids
• x500-principal-decoder
  • oid
  • required-oids