Legacy integration is always going to be a concern so should verify that we can delegate to JAAS if required.

Delegating to JAAS is always going to simplify the password types supported so this is more of an ensure we can integrate with JAAS rather than ensure we can fully integrate with JAAS.