Currrntly LoginContext invokes LoginModules in a doPrivileged. There are sound reasons for this. However for the KerberosLoginModule checkPermission needs to be done using the caller's accesscontrol context to verify whether the user is allowed to get a TGT or get a service ticket. So we need to pass the caller's access control context in sharedstate to the individula login modules.