/configurable-sasl-server-factory/protocol
/configurable-sasl-server-factory/server-name

/filesystem-realm/levels

/token-realm/public-key
/token-realm/principal-claim
/token-realm/oauth2-introspection/host-name-verification-policy
/token-realm/oauth2-introspection/introspection-url
/token-realm/oauth2-introspection/client-secret
/token-realm/oauth2-introspection/client-id
/token-realm/oauth2-introspection/public-key
/token-realm/oauth2-introspection/token-realm

/jdbc-realm/principal-query/sql
/jdbc-realm/principal-query/data-source
/jdbc-realm/clear-password-mapper/password-index
/jdbc-realm/bcrypt-mapper/password-index
/jdbc-realm/bcrypt-mapper/salt-index
/jdbc-realm/bcrypt-mapper/iteration-count-index
/jdbc-realm/salted-simple-digest-mapper/algorithm
/jdbc-realm/salted-simple-digest-mapper/password-index
/jdbc-realm/salted-simple-digest-mapper/salt-index
/jdbc-realm/simple-digest-mapper/password-index
/jdbc-realm/scram-mapper/algorithm
/jdbc-realm/scram-mapper/password-index
/jdbc-realm/scram-mapper/salt-index
/jdbc-realm/scram-mapper/iteration-count-index

/security-domain/default-realm 

These applies to key-store and key-manager:
*/credential-reference/store
*/credential-reference/alias
*/credential-reference/type
*/credential-reference/clear-text

/configurable-sasl-server-factory/properties
/custom-role-mapper/configuration
/mapped-regex-realm-mapper/realm-map
/x500-attribute-principal-decoder/required-oids
/custom-permission-mapper/configuration
/configurable-http-server-mechanism-factory/properties
/custom-name-rewriter/configuration
/custom-principal-decoder/configuration
/custom-realm-mapper/configuration
/custom-modifiable-realm/configuration
/custom-credential-security-factory/configuration
/custom-role-decoder/configuration
/custom-realm/configuration