No security-identity support in jboss-web.xml

The run-as identity support is incomplete in the web tier as compared to the ejb tier since the jboss-web.xml descriptor has no support for a <!ELEMENT security-identity (run-as-principal)> to allow for the run-as principal name. This means that all run-as web tier principal names are the default 'anonymous'.