The undertow subsystem provides a resource named application-security-domain. HAL should provide a screen to allow users to configure this resource and its child resources.