The JaasSecurityManagerService should allow control over whether the SecurityAssociation.setServer() is called as part of the service startup. A ServerMode attribute which controls whether the setServer mode is enabled would address this.