the split into security:passwordmanagement makes not much sense.. having it in security will allow us to forward the package to Factory