The other quickstarts demonstate 3 ways to configure the server: 

        Configure the Security Domain by Running the JBoss CLI Script
        Configure the Security Domain Using the JBoss CLI Interactively
        Configure the Security Domain by Manually Editing the Server Configuration File

Take a look at the ejb-security-interceptors for an example. I'm not sure how important it is to have all methods. The scripts are probably the most important, but it would be a good idea to show the resulting XML that's created in the standalone.xml file: 

                <security-domain name="GenericHeaderAuth">
                    <authentication>
                        <login-module code="org.jboss.security.auth.spi.RemoteHostTrustLoginModule" flag="required">
                            <module-option name="trustedHosts" value="127.0.0.1"/>
                            <module-option name="roles" value="guest"/>
                        </login-module>
                    </authentication>
                </security-domain>