I'm new to all this (any sort of WebApp admin/dev), so don't take my words as bona fide fact.
From some digging earlier in the day I found something that I believe to be related. $JBOSS_HOME/server/default/deploy/jboss-portal.sar/portal-server.war/WEB-INF/web.xml
I believe the url-pattern tags define how the URL appears under certain conditions. There are a couple sections involving the "/sec/*" mapping.