Major Description
currently the cxf-ws-security-osgi use callbackhandler to do authentication on server side.
I'd enhance it to leverage cxf JAASLoginInterceptor to authenticate against karaf default jaas configuration, so we can wire cxf ws-security into karaf jaas which should be more useful for uses.