With the new shutdown script in JBoss 3.2.2 it is now possible to shutdown a server remotely if you know the port the naming service is listening on.

How can I secure this so that not just anyone can shutdown my server (other than closing the port via a firewall)?

I notice the shutdown script has a username and password option, but it says "[not implemented yet]".

Thanks