Add the ability to globally set the behaviour of methods with missing security metadata
Fix the ejb3 xsd