Oh I think we missed the most obvious chicken-egg problem yet: The spec currently defines that ProcessBeanAttributes must ONLY get fired for 'enabled' beans. But if you use ProcessBeanAttributes#veto() then this bean is not enabled anymore...