The passwords_manager make some costly work in its constructor (it loads all the passwords plugins), so it should be construct only when it is used (http://symfony.com/doc/current/components/dependency_injection/lazy_services.html)