The :read-resource(include-runtime=true) operation is used by the console as part of the generic model browser. However it fails for /subsystem=undertow/application-security-domain=foo:

[standalone@localhost:9990 /] /subsystem=undertow/application-security-domain=foo:read-resource(include-runtime=true)
{
    "outcome" => "failed",
    "rolled-back" => true
}