Title: About JMX and Role-Based Access Control Describe the issue: Item 3 describes the default state, but it doesn't say at all that it can be changed (and how). Suggestions for improvement: Just add a sentence or two at the end of the 3rd item describing the JMX subsystem's <sensitivity non-core-mbeans="true|false"> thing. If this is described elsewhere (not sure right now), then at least a link from this section should be added.