Subject.getPrincipals(), getPublicCredentials(), getPrivateCredentials() are inherently unsafe

[Roman Leventov]

If somebody tries to iterate these collections concurrently with
modification in another thread, the consequences are undefined.

A possible fix is to use CopyOnWriteArrayList as SecureSet.elements field
instead of LinkedList.