[security-dev] managing EntityManager in JPA data store