Each vdb should be protected by its own security-domain

Every vdbs are protected by single security-realm. It does not fit some enterprise requirement on a security workflow. Ideally, each vdb should be protected by its own security-domain like a servlet and an EJB.