Allow specifying an empty security domain to disable security for an EJB