The application-security-domain resource was added to map from the security domain specified within the deployment to a WildFly Elytron authentication factory with some additional related configuration.

It should be possible to define all of this within a deployment descriptor.

Additionally the subsystem includes a default-security-domain attribute, it should likely contain some default Elytron configuration options.