Ejb security fix

This fixes the remaining tests in https://github.com/jbossas/jboss-as/pull/4036