Add ability to disable security if not required

At the moment Web and EJB deployments will always attempt to set up a security context, even if a deployment does not use security or the security subsystem is not installed.

If the subsystem is removed or excluded via jboss-deployment-structure.xml then no security related interceptors / setup should be used, in order to improve performance.