I figured it out myself. You can't configure security domain in jboss-webservices.xml. You have to use another deployment descriptor along with it, either jboss-ejb3.xml or jboss-web.xml, depending on how you are packaging the artifact.
Reply to this message by going to Community
Start a new discussion in JBoss Web Services at Community