Several classes in the `java.security` package lazily compute their hash value and store it in a field. These fields can typically be annotated with the `@Stable` annotation. Many of the current implementations are using -1 as a flag for not computed, this needs to be refactored away.

Here are some examples of such classes: PKCS12Attribute, Timestamp, Certificate, and URICertStoreParameters.