This is still going to require discussion to agree the scope.

Note: When we talk about changing the default configuration any legacy configuration from EAP 7.1 can still be ported to EAP 7.2 without being impacted by these changes.

At the very least the management interfaces should be updated to use the Elytron capabilities instead of the legacy security realm - the two are equivalent anyway.

Application specific resources as well should likely switch.