A SecurityContext can be serialized to pass it to a different process, however SecurityManagement contains settings specific to the process - so add a SecurityManagement implementation that can use SecurityFactory to obtain and delegate to the process specific implementation.