org.wildfly.security.cache.CachedIdentity and org.wildfly.elytron.web.undertow.server.servlet.ServletSecurityContextImpl$IdentityContainer are immutable and ds not need to be replicated when read from the session.