Hm, it comes from Java EE Security API which is part EE 8. AFAIK WildFly 11 does implement Java EE 7.