Ideally the existing SecurityStore and configuration will remain for doing per-deployment keystore configuration.

Optionally they should be able to refer to a JaasSecurityDomain, which would be globaly configured. This needs to be optional because we deploy against the mc, which is not necessarily jboss (could be tomcat).

-Jason