[Design of Security on JBoss] - Re: Security aspect updates