One way to do this is to write your own DocumentBuilder
and DocumentBuilderFactory implementations ... these
classes are used by JBoss to read pretty much all XML
based config files.

In your builder class you can then perform your own
decryption steps in the parse() method to retrieve
the XML before actually parsing it.

Check the javax.xml.parsers package docs.