I believe the intent is to not have any public classes or interfaces in the elytron maven module other than those excluded from export in the module.xml or ones expressly intended to be API to other subsystems or end users. I don't think ModifiableKeyStoreDecorator is either.