//this is primarily so that jboss's webservices impl will work, as it
//sets up a SecurityAssociation that can only be cleared by jetty if
//there is a realm
if (_realm == null)
{
_realm = new JBossUserRealm("other", getSubjectAttribute());
getSecurityHandler().setUserRealm(_realm);
}
//start the realm from within the webapp's classloader as it wants
//to do JNDI lookups