ServerAuthModule (JSR 196) implementation allow configure remoteUser (javax.servlet.http.HttpServletRequest#getRemoteUser) and list of user security groups in runtime, without app server restart.