code: private SecurityConfiguration getEffectiveSecurityConfiguration() {
          SecurityConfiguration effectiveConfig = configs.getService(cfgSystemDomain);
          if (effectiveConfig == null) {
              Tr.error(tc, "SECURITY_SERVICE_ERROR_BAD_DOMAIN", cfgSystemDomain, CFG_KEY_SYSTEM_DOMAIN);
              throw new IllegalArgumentException(Tr.formatMessage(tc, "SECURITY_SERVICE_ERROR_BAD_DOMAIN", cfgSystemDomain, CFG_KEY_SYSTEM_DOMAIN));
          }
          return effectiveConfig;
      }
docs: Eventually this will be execution context aware and pick the right domain.
  Till then, we're only accessing the system domain configuration.
  
  @return SecurityConfiguration representing the "effective" configuration
  for the execution context.