Hi,
I tested authentication with JBoss AS 7.1.0.Final-Prerelease and with 7.1.0.Final: same issue.
<security-domain> is just ignored.
I have no ideas what I could try more and I doubt that I configured something wrong.
That's why I have alle reasons to concider it as bug.