The tests in the org.jboss.as.test.integration.security.jacc package have been ignored for a very long time:

https://github.com/wildfly/wildfly/tree/main/testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/security/jacc

At least one of these tests would require rework to not use PicketBox things that have been commented out.

These tests are the only uses we have for dom4j.

We could delete these tests but we should also consider if any additional coverage is needed for this.