[Design of Security on JBoss] - Re: SRP and SASL