As discussed with @rwinch, we can add a `SecurityContextRepository` implementation that stores the `SecurityContext` as a request attribute.