API used by EJB 3.0 container for security part.