[WFLY-490] For IN-VM calls or more specifically calls that do not have a remote user associated with the AccessControlContext use a SecurityManager permission check to verify the calling code can run as the default role.