AbstractServerLoginModule#validOptions is initialized with the default HashSet size (which is the default HashMap) size. However since it's lazily initialized in addValidOptions and we have the valid module options there we know what the right size will be.