FYI I've found a few cases where org.jboss.aspects.security.SecurityClientInterceptor is declared in xxx-interceptors-aop.xml files in the testsuite. The stateful tests at least will fail with a CNFE if that is declared. So, I'm going to change these to use org.jboss.ejb3.security.client.SecurityClientInterceptor which AFAICT is the correct class.

Changing in src/test/resources:

test/bank/bank-ejb3-interceptors-aop.xml
test/clientinterceptor/clientinterceptor-aop.xml
test/stateful/statefulTest-ejb3-interceptors-aop.xml
test-configs/removedislocal/deploy/ejb3-interceptors-aop.xml