t is possible to define JMS resource (connection and destination) using JMS 2.0 annotations.

The userName & password attributes of this annotation should support to be vaulted so no user credentials would appear in clear text in the source file:

@JMSConnectionFactoryDefinition(
        name="java:global/myFactory3",
        interfaceName = "javax.jms.QueueConnectionFactory",
        user = "${VAULT::messaging::userName::1}",
        password = "${VAULT::messaging::password::1}"
)