Ok that does sound wrong - there is a situation I am still working on properly using the cache where new connections are created but if the same connection is used you should not be seeing repeated calls to the security domain - can you just show me your realm and domain configuration so I can double check it and I will cover your scenario in my testing.