Thx for answering and sorry for not responding back, but in the meantime we thought of a solution that is good enough. For common methods we're using static methods in POJOs that are passed a session. In this way web layer just passes SMPC and other code CMPC. It just amazes me that this problem is not discussed already. It should be common enough.