I'm still uncomfortable with this code for two reasons:

1. "is not impacted due to 2 threads w/ different storm conf files." This is not true with the current code, as if the system property is not set, you set the property on line 48. So the second thread with the differing storm conf would be impacted, and if it had a differing java.security.auth.login.config in the storm conf, then the second thread would have a runtime exception. 
2. The link you sent says "The default Configuration implementation from Sun Microsystems reads configuration information from configuration files". Will this code work appropriately on other JVM implementations?