Another goal is allowing methods to be selected via command-line argument, configuration files, the jcmd tool, and over the network via the Java Management Extensions API.

7. API for authorization interceptors Currently, Java EE supports only role-based authentication methods. The API for authorization interceptors will make it easier to implement rule-based security.