Javadoc
By default, calls
SecurityContextHolder#createEmptyContext() to obtain a new context (there should be
no context present in the holder when this method is called). Using this approach the context creation
strategy is decided by the
SecurityContextHolderStrategy in use. The default implementations
will return a new SecurityContextImpl.