The ArtemisSecurity CR deals mostly with jaas, which can be externalise with -jaas-config which no longer requires a restart.
the jmx access controll bit can be replaced with broker security settings
the jmx connectors may need work, but the jolokia agent can suffice in many circumstances

in any event, we need to singnal with deprecation that we won't be further developing the Security CR.