SecurityListener.fire* methods have @Restricted(NoExternalUse.class) annotation making external security implementations like github-oauth-plugin unable to fire those events.

I've made a pr here

https://github.com/jenkinsci/jenkins/pull/1277