It is a matter of separating the connections in the pool. That can only be done through the security domain.
Related is reauthentication of connections, where the credentials are changed on existing connections, but only IronJacamar supports that. However, we don't have a plugin for Oracle yet.