This method is synchronized since javax.security.auth.login.Configuration:getConfiguration() depends on system property "java.security.auth.login.config". We need to make sure that the login configuration object is based on the given storm configuration, and is not impacted due to 2 threads w/ different storm conf files.