Thoughts about authentication method / workflow mapping

[Tom Zeller]

>> I see some mixing of vocabulary that you might want to consider:
>>
>> @Nonnull private Subject supportedPrincipals;
>>
>> That seems to equate subject and principal...
>
> No, that's strictly internal. If you look, Subject doesn't appear on the API at all, I just used it to shortcut having to implement my own class-indexed Principal collection. Which itself is easy to replace, I just did it to save time. But the API is currently in terms of Principal, strictly. May just need a comment explaining that.

Just noting that a comment would be helpful as this caught my eye too.