Only DataSourceEnable appears to have a dependency defined against the security domain used (SecurityDomainService). Also any security domain used in recovery needs a dependency. Likewise for resource adapter deployments.
Verified on revision EAP 6.4.0.DR9. Security Domain of Recovery is added as a dependency as well.