SecurityConfiguration#appPolicies is not thread safe

This map is a normal hash map with no sync. When multiple security domains are being added this could cause problems, as Wildfly starts the security domain services concurrently.