Migrate password based attributes in beans to additionally accept PBE or SubjectFactory setup

We need to identify configurations where password is required and provide capabilities to do PBE (security-domain) or the SubjectFactory injection.

The SubjectFactory instance should be able to accept a password. The SF instance can be injected to multiple beans.