The security realms will be tracking failed authentication attempts and need a mechanism to evict entries from the caches so we need a central executor, if we add it to the Elytron extension we can add configuration later.

The Digest mechanisms already use an Executor for nonce handling and can maybe later be updated to use this,

At the outset a single thread is likely sufficient.