[Security & JAAS/JBoss] - Re: Question on security model for separate modules