The following proposal describes new security realm meant to provide alternative to custom login modules that could be configured in legacy security subsystem: