Technically, we don't require a separate interface for using on a secured bean. You could reuse the Hello interface on the secured bean too. But since this is a quickstart, perhaps your intention is to make it a bit more clear to the users looking at the client code to quickly realize that they are invoking on a secured bean? If so, then it's fine to have this interface.