Currently we have two different SecurityDomain annotation implementations:

org.jboss.aspects.security.SecurityDomain - found in jboss-security-aspects.jar
org.jboss.ejb3.annotation.SecurityDomain - found in jboss-ejb3-ext-api.jar

This has been causing confusion among users that want to protect their ejbs using this annotation. We should create a SecurityDomain annotation in Security SPI (as it is a jbosssx specific annotation) and remove the other ones to keep things organized and avoid this kind of confusion.