Security plugins have moved to the jbosssx cvs module.