Not intended as a question of trust, intended as a matter of leaving the most useful breadcrumbs to the developers who will happen upon this code in the future and, as I did, have a bit of a "say what?" moment on this bit.

Blog post?  Mailing list thread?  JBoss product issue tracker entry? No?  JBoss is open source software, so I hope there's somewhere to give this issue an airing besides composing a workaround into a CAS-client-specific Filter?