[Issue ID] TCS-1767 [Description] 
The JMX authenticator accepts an encoded password in addition to the clear password. The authenticator should require a clear password. For more on this fixed vulnerability, see CVE-2011-0527 at the SpringSource Security Team Web site.