code: private SecurityMetadata getSecurityMetadata(WebAppConfig webAppConfig) {
          WebModuleMetaData wmmd = ((WebAppConfigExtended) webAppConfig).getMetaData();
          return (SecurityMetadata) wmmd.getSecurityMetaData();
      }
docs: Gets the security metadata from the web app config
  
  @param webAppConfig the webAppConfig representing the deployed module
  @return the security metadata