Minor Description
there is still a TODO left in Oak that asks for replacing the
default security provider that is currently configured.
in order to avoid confusions and inconsistencies (in particular with the
Jcr object) i would suggest to remove the default altogether.