By making them available using ServlceLoader discovery it will mean the Elytron subsystem will not need mandatory dependencies on PicketBox or the legacy security subsystem to co-exist with the legacy implementations.

This will involve adding a new module security-integration which will contain the service descriptor.