Where would the configuration be? That is now 'plugged in' on a completely backwards compatible and configurable way.
Same place? Why would that change?
The name and location of the 'wrapper' configuration can be configured, and the name and location of the authentication implementation can also be configured. And anyway, I think it is nice to split of different functionalities to different classes.
Possibly, but if you intend some functionality to be used with every implementation anwyay (since otherwise whole pieces of the code will stop working under another security system), it may not be wise to put it in an 'optional' piece of code.
-- Pierre van Rooden Mediapark, C 107 tel. +31 (0)35 6772815 "Never summon anything bigger than your head."
