settings-security.xml should use -Dsettings.security property instead of current one:

See
https://jira.codehaus.org/browse/MNG-4853

Likely we'll will keep older property there working and just remove it from documentation.

cc'ed wujaszek