Currently Hibernate just statically resolves the JACC PolicyConfiguration. Would be good to make this pluggable.