I have the ability to disable the remote interfaces to the recovery
manager working in the following pull request:
https://github.com/jbossas/jboss-as/pull/58
In this request I raise the question of whether the current
configuration is too low level in that it is largely a mapping of the tm
configuration beans, and it takes a combination of two properties to
achieve the result of disabling the recovery manager remote interfaces.
Perhaps just a single enable-remote-access on the recovery-environment
that sets appropriate properties on the underlying
RecoveryEnvironmentBean and CoordinatorEnvironmentBean would be a better
solution.