SEC-1779: Make new getters protected rather than public.

web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java

@@ -429,11 +429,11 @@ public abstract class AbstractAuthenticationProcessingFilter extends GenericFilt
         this.failureHandler = failureHandler;
     }
 
-    public AuthenticationSuccessHandler getSuccessHandler() {
+    protected AuthenticationSuccessHandler getSuccessHandler() {
         return successHandler;
     }
 
-    public AuthenticationFailureHandler getFailureHandler() {
+    protected AuthenticationFailureHandler getFailureHandler() {
         return failureHandler;
     }
 }