[jboss-user] [Security & JAAS/JBoss] - How does the Authorization delegate access the sharedState?