The jar files in $JBOSS_HOME/client are needed when deploying a client to java web start.
However, the jax rpc stuff causes security exceptions to be thrown at initialisation.
Therefore, the JAR files all need to be signed by JBoss (they currently are not signed) and loaded from an 'extension' jnlp file. The extension JNLP file needs to have the following:
<all-permissions/>