[Design of Security on JBoss] - Re: High-level scoping of Security for JEE5