[jboss-dev] security changes checked into jbas trunk