I've combined KeycloakSession and ProviderSession into KeycloakSession. There's a single implementation of this (DefaultKeycloakSession). Model implementations now implement ModelProvider instead of KeycloakSession.