Our current implementation is expected to break on Maven 4

See for reference the email-thread on another plugin that suffers from direct use of the sec-dispatcher classes:
https://lists.apache.org/thread/4fywo93s80fhmcj58cg9lvj5s61497tc