password security doesn't work with custom password providers

The _decryptors field is not populated in the component descriptor definition for ...SecDispatcher:maven. Since plexus-sec-dispatcher provides a correct component definition for this, maybe we can do away with the maven role-hinted component, and use the default instead.