Custom identity model classes are required to have no-arg constructors so that PicketLink can instantiate them. This is fine, but it would be nice if the no-arg constructors didn't have to be public. This is helpful for developers who want to guarantee that their model objects are always in a valid state by only allowing other classes to use a constructor that takes arguments.