Use new zope.traversing, which allows us to get rid of zope.password, zope.principalregistry and zope.securitypolicy.