JAX-WS EJB endpoint security