pooled connection factory does not define an application security policy

From a customer case, it appears that AS7 pooled-connection-factory does not set an application security policy for its JCA pool.

This implies a performance overhead since destroying a connection implies having to creating a new one every time (https://docspace.corp.redhat.com/docs/DOC-101004#IJ000612_Destroying_a_connection)