This artifact originates from the Orbit Project at Eclipse, it is an osgi bundle and is signed as well.
'org.eclipse.jetty.orbit:javax.security.auth.message:1.0.0.v201108011116'
<dependency>
<groupId>org.eclipse.jetty.orbit</groupId>
<artifactId>javax.security.auth.message</artifactId>
<version>1.0.0.v201108011116</version>
</dependency>
<dependency org="org.eclipse.jetty.orbit" name="javax.security.auth.message" rev="1.0.0.v201108011116"/>
"org.eclipse.jetty.orbit", "javax.security.auth.message", "1.0.0.v201108011116"