docs: public static void handlePasswordValidationCallback(PasswordValidationCallback callback, Subject executionSubject, Hashtable<String, Object> addedCred, String appRealm,
                                                          Invocation[] invocations)
                      throws RemoteException, WSSecurityException {
          invocations[2] = Invocation.PASSWORDVALIDATIONCALLBACK;
          if (TraceComponent.isAnyTracingEnabled() && tc.isEntryEnabled()) {
              Tr.entry(tc, "handlePasswordValidationCallback", new Object[] { objectId(callback), callback.getUsername() });
          }
          Subject callSubject = callback.getSubject();
          if (!executionSubject.equals(callSubject)) {
              Tr.warning(tc, "EXECUTION_CALLBACK_SUBJECT_MISMATCH_J2CA0673", new Object[] { "PasswordValidationCallback" });
              callSubject = executionSubject;
          }
          try { // 673415
              String userName = callback.getUsername();
              String password = null;
              if (callback.getPassword() != null) {
                  password = new String(callback.getPassword());
              }
              if (callSubject != null) {
                  GetRegistry action = new GetRegistry(appRealm);
                  UserRegistry registry = AccessController.doPrivileged(action);
                  if (checkUserPassword(userName, password, registry, appRealm, addedCred, invocations[0])) {
                      callback.setResult(true);
                  } else {
                      callback.setResult(false);
                      addedCred.clear(); // 673415
                  }
              }
          } catch (PrivilegedActionException pae) { // End 673415
              callback.setResult(false);
              addedCred.clear();
              Exception ex = pae.getException();
              if (TraceComponent.isAnyTracingEnabled() && tc.isEntryEnabled()) {
                  Tr.exit(tc, "handlePasswordValidationCallback", callback.getResult());
              }
              if (ex instanceof WSSecurityException) {
                  throw (WSSecurityException) ex;
              } else { // This means an unexpected runtime exception is wrapped in the PrivilegedActionException
                  throw new WSSecurityException(ex);
              }
          }
          if (TraceComponent.isAnyTracingEnabled() && tc.isEntryEnabled()) {
              Tr.exit(tc, "handlePasswordValidationCallback", callback.getResult());
          }
      }