The Secure annotation should include some javadoc, including a hint on enabling its interceptor in the beans.xml of the using project