But once those decisions are made and the rubber hits the road, they'll likely be leveraging the MVC 1.0 API for developing presentation-tier components, and it's the new Java EE Security API, ...