Looks like security interceptors was a popular feature request for Java EE8. Something we should probably get involved with I think? https://blogs.oracle.com/ldemichiel/entry/results_from_the_java_ee