MDB @ActivationConfigProperty allows substitution using System properties.

However, there is no full expression support including reading from the vault. This prevents to store sensitive properties such as properties into the vault.

Instead of ad hoc replacement of the properties using System properties, the @ActivationConfigProperty should delegate to the expression resolver and vault reader used throughout the WildFly codebase