"Security context" not propagated to Interceptors?