Well, javax.security.enterprise.SecurityContext is not defined as a built-in bean in CDI spec, where does it come from?