JAX-RS EJB security