The Elytron integration is moving away from the current AuthenticationMechanism association to allow the Elytron SecurityDomain more control of the authentication process.

The current association of AuthenticationMechanism instances and subsequent obtaining of these is an implementation detail of the Undertow implementation so it makes sense for these to be removed from the main API - maybe to an optional interface a SecurityContext can implement if it does support these.