There is also an issue in the JDBC rar where it clones the properties
because of Oracle modifying them which could certainly be made configurable
for better behaved jdbc drivers.
Yes, the Subject is not effecient to use or copy and its final nature makes it impossible to extend. Its probably a bad thing to use the only fundamental representation of the caller for these reasons, but not much can be done until the jbosssx api is revisted.