Understanding security features in GlassFish