The SecurityContextImpl is really performing two different tasks: -
1 - Handling notifications and some general state around security.
2 - The actual authentication.

When replacing the SecurityContext implementation and replacement may want to replace both #1 and #2 but it is most likely the intent would be to just replace #2.