There is a need for a Security Client SPI that is going to move the client applications away from the dependence on JAAS and/or SecurityAssociation. There is a need to come up with a Security Client SPI (that can do JAAS, JGSS and/or SASL).

Need to get this SPI in before we do the Security 2.0.0.GA release.