During the deployment of web applications the RunAsListener establishes a security context before the init method is invoked on servlets being deployed.
This Listener also establishes the SecurityContext before a servlet is called or destroyed.
When this deployment happens during the application server start up this association is on the 'main' thread, as this is using an InhertableThreadLocal it is possible in certain conditions to become shared by other child threads.
This Jira issue is to ensure it is cleared after deployment.