Adding Security BOM with DS and PL

I haven't used -with-security BOM due to unclear what should be used:

http://search.maven.org/#search|ga|1|with-security

We could go with:
* AS7
* EAP
* WF

by default. It is unclear whether having more versions of -with-security will help here. PL dependencies are aligned with Quickstarts.

CC'ed @vibe13 
we do not use JSF!