Make default EJB permissions configurable