SessionFactory.getFilterDefinition() exposes an SPI type in its return value, which is a layer-breaker.
This is pretty harmless, but let’s deprecate the method anyway, since it’s not particularly useful for anything.