TL;DR: Authz need a server token to communicate with the server, we need store this token so, authz need store lib as dependency. This token need to be stored encrypted so, store need security and castles. Makes sense?
About push, we don't have plan to release the play module until version 3.0.0
Anyway you can fix the problem easily using multidex.