There are a couple places in Undertow that are using core's SecurityRealmService class instead of its Service type, SecurityRealm. Clean that up to help make it clear what code from core's domain-management code is API relied upon by subsystems.