classcast solved by downgrade lib xmlsec-1.4.6.jar at module org\apache\santuario\xmlsec\main (this downgrade however breaks ws-security functionalities through JBossWS / Apache CXF)
impossible to getInstance of a XMLSignatureFactory