It would be cool if AttributeConverter implementations could be package protected to prevent them from being referred to by other parts of the code base. It looks like simply making the type accessible in AttributeConverterDefinition.instantiateAttributeConverter(…) should do the trick.