I understand what you say. But I have experienced this personally and my recommendation is based on that. DRY principles are good but in this context its difficult to manage.

In general non-functional libraries can damage less compare to the functional ones. So the security related library might work. Even in this case, I would suggest keep all the algorithms or validations at the server side, as this might create another coupling layer.