I too am trying out JBoss 7 for a production environment and ran into a deal breaker. Unless I find a fix in the forums, I am waiting until 7.1. The <security-domain> is having trouble masking a password using SecureIdentityLoginModule. Having the password to the backend datasource in plain text is no go at this point.