code: private SecurityConstraint createSecurityConstraint(com.ibm.ws.javaee.dd.web.common.SecurityConstraint archiveConstraint, boolean denyUncoveredHttpMethods) {
          List<WebResourceCollection> webResourceCollections = createWebResourceCollections(archiveConstraint, denyUncoveredHttpMethods);
          List<String> roles = createRoles(archiveConstraint);
          boolean sslRequired = isSSLRequired(archiveConstraint);
          boolean accessPrecluded = isAccessPrecluded(archiveConstraint);
          boolean fromHttpConstraint = false;
          boolean accessUncovered = false;
          return new SecurityConstraint(webResourceCollections, roles, sslRequired, accessPrecluded, fromHttpConstraint, accessUncovered);
      }
docs: Creates a SecurityConstraint object that represents a security-constraint element in web.xml.
  
  @param archiveConstraint the security-constraint
  @return the security code's representation of a security constraint