Minor Description
JDK deprecation (for removal) of SecurityManager is going take AcccessController and AccessControlContext classes with it.
We need to stick the JAAS Subject on the Karaf Shell Session to allow commands and other utilities the ability to get the current logged in user.
karaf/shell/console ShellUtil:
AccessControlContext acc = AccessController.getContext(); final Subject subject = Subject.getSubject(acc);