Core access-control related code, including
security metadata related classes
interception code
Security access control annotations
Voter-based AccessDecisionManager implementations