While the two endpoints definitions bellow should be effectively the same, the later one auto-enables RESP and MemcacheD endpoints while the former one does not.

Upon discussions about expected behavior, it's expected that RESP won't be enabled if authentication isn't as single-port could have issues auto detect the protocol.

<security>
   <security-realms>
      <security-realm name="default">
      </security-realm>
   </security-realms>
</security>
<endpoints socket-binding="default" security-realm="default"/>

<endpoints socket-binding="default"/>