[jboss-dev-forums] [Design of EJB 3.0] - Pulling security out as a separate module