So, update: Yes a DS component can expose multiple services This worked: https://gist.github.com/steinarb/39e9b4de1ee2ab6da57eea4c7df9e5b5#file-oldalbumshirofilter-java-L39
Filter is picked up fine by the OSGi web whiteboard (verified that I get a login prompt when I expect to get it). And ReloadableShiroFilter is picked up by the Web API and can be used to trigger a shiro filter config reload.
