Before we used CCDNUserSecurityBundle, we had a list of the individual Symfony components that we depend on. Since CCDNUserSecurityBundle has a dependency on Symfony/Symfony we had to finally make the step to depend on the full Symfony distribution.
It was not such a problem in our case, but it might be for others. So maybe it would be better if CCDNUserSecurityBundle would depend just on the Symfony components that are real dependencies.