While reviewing legacy documentation/examples still publicly available, I found that some WildFly/JBoss guides reference insecure practices for datasource password management:

• org.jboss.resource.security.SecureIdentityLoginModule relies on a hard-coded master password, meaning encrypted datasource passwords can be trivially recovered.

• JaasSecurityDomainIdentityLoginModule with PBEUtils also demonstrates outdated password-based encryption methods that no longer provide adequate security.