The JSecurity development team recently discussed on which of the two choices we should use in our project moving forward.
I outlined it in my latest blog post for those interested.
Les