WFLY-381 Add undertow support to mod_cluster subsystem.
HornetQ security manager doPrivileged() block

move all HornetQ user and roles validation into a single
AccessController.doPrivileged() block.
validateUserAndRole() is called from a thread in HornetQ own's thread
pool. Calling it inside  a doPrivileged() block ensures that the code
will not raise an AccessControlException when WildFlySecurityManager
checks the permissions.
Group all the doPrivileged blocks into a single one.
Surefire tests leave jdr_zip file because it cannot be deleted while open. Also move it to target/ and test outputDir/close.
[WFLY-1434] Enable assignment of groups for management users.

These groups will subsequently be used to assign role membership for domain management access control.
[WFLY-878] MDB DeliveryActive property

* update jboss-ejb3-ext-api version to 2.1.0
* add management operations start-delivery & stop-delivery
 (+ delivery-active runtime read-only attribute) to be able to
 start/stop delivery on the MDB resource (under
`/deployment=<deployment_name>/subsystem=ejb3/message-driven-bean=<mdb_name>`).
* by default, the MDB is started and delivery of messages occurs as soon
  as the MDB is deployed (no change from the previous behaviour)
* add support for jboss-ejb3-ext-api's @DeliveryActive to annotate the
  MDB or alternatively using the urn:delivery-active:1.0 element in
  jboss-ejb3.xml deployment descriptor
[WFLY-490] Basic permission and constraint classes
[WFLY-490] Rename ContraintDefinition to AccessConstraintDefinition
[WFLY-490] Use Authorizer in OperationContextImpl
[WFLY-490] Get basic perm checks working
[WFLY-490] Help ensure process lifecycle ops require write-runtime perms
[WFLY-490] Fix constraints; annotate a couple things as sensitive
[WFLY-490] Temp hack for reading operation-headers from HTTP GET
[WFLY-490] Add AccessConstraintDefinitions to attribute and operation definition and builders
[WFLY-490] Configure the sensitivity constraints, vault expressions sensitivity and application types
[WFLY-490] Basic filtered read-resource support
[WFLY-490] Don't expose addresses via wildcard requests
[WFLY-490] Better read attribute enforcement
[WFLY-490] Fix resource filtering reporting with recursive reads
[WFLY-490] write-attribute enforcement
[WFLY-490] added a bunch of TODOs at questionable places in the code