Any method permissions or ejb3 security annotations on the bean.

This is important for security domain fallback (if no security domain is configured).