Fix: NPE Deploying EJB @WebService without Security Domain

Allow security domain to be null to disable security interceptors, and avoid NPE during deploy if missing.  See JIRA: https://issues.jboss.org/browse/WFLY-3850