p.s.

I checked the githib/javaee repos, and the branches still seem to be open to be created.

So for the mentioned experimental next API, shall I create two branches in https://github.com/javaee/security-soteria and https://github.com/javaee/security-api or shall I fork both to a new org that's open to all previous committers?