https://www.ibm.com/developerworks/java/library/j-javaee8-security-api-2/index.html