I failed to pass security review for an app that has two classes using the "without sharing" keyword. Both were not choosen accidentally but by design.
On class is
SObjectUnitOfWork.cls from Andrew Fawcett's Patterns library a well-known and Salesforce.com recommended public library.
The other class was added by myself to access data that is not owned/shared by the user. So I used "without sharing".
How can I pass security review with those cases?