[jboss-user] [Security & JAAS/JBoss] - Using database for authorization ONLY?