Corruption of application-security-domain attachment between Stage.MODEL and Stage.RUNTIME

This may only affect Undertow but could also affect EJB.

We add an attachment to the OperationContext in Stage.MODEL so we can coordinate the runtime API with Stage.RUNTIME, this strategy will work fine if we have only a single instance of the resource defined but if we have multiple resources defined there is no mechanism to prevent the attachment being replaced.