code: private boolean isSSLRequired(com.ibm.ws.javaee.dd.web.common.SecurityConstraint archiveConstraint) {
          boolean sslRequired = false;
  
          UserDataConstraint dataConstraint = archiveConstraint.getUserDataConstraint();
          if (dataConstraint != null) {
              int transportGuarantee = dataConstraint.getTransportGuarantee();
              String webResourceName = archiveConstraint.getWebResourceCollections().get(0).getWebResourceName();
              Map<String, ConfigItem<String>> userDataConstraintMap = configurator.getConfigItemMap(USER_DATA_CONSTRAINT_KEY);
              ConfigItem<String> existingUserDataConstraint = userDataConstraintMap.get(webResourceName);
              if (existingUserDataConstraint == null) {
                  userDataConstraintMap.put(webResourceName, this.configurator.createConfigItem(String.valueOf(transportGuarantee)));
                  if (transportGuarantee != UserDataConstraint.TRANSPORT_GUARANTEE_NONE) {
                      sslRequired = true;
                  }
              } else {
                  this.configurator.validateDuplicateConfiguration(SECURITY_CONSTRAINT_KEY, USER_DATA_CONSTRAINT_KEY, String.valueOf(transportGuarantee),
                                                                   existingUserDataConstraint);
                  //ignore user-data-constraint specified in web-fragments, since it's already specified in web.xml
                  if (ConfigSource.WEB_FRAGMENT == this.configurator.getConfigSource() && ConfigSource.WEB_XML == existingUserDataConstraint.getSource()) {
                      return false;
                  }
              }
  
          }
          return sslRequired;
      }
docs: Determines if SSL is required. SSL is required if the transport guarantee is other than NONE.
  Note that only one user-data-constraint element can be present per security-constraint. Only the first occurrence is processed.
  If multiple web fragments specify this element with different values and it's absent from the web.xml, this will result
  in an error that fails the application install.
  
  @param archiveConstraint the security-constraint
  @return false when transport-guarantee is NONE, otherwise true