DMXStorage must not be consumable as an OSGi service
This is a potential security hole. A plugin deployed at the server could inject the storage service to itself, and thus bypassing access control. The storage service must be exclusively available to Core.
@jpn @mukil FYI