...
Security configuration of run-as and default identities is incompatible with geronimo 1.x versions. If you use run-as roles or default identities you will have to manually modify your geronimo plans to the new mechanism. See Configuring run-as and Default Subjects, and principal-role mapping Running Geronimo.
Review backward compatibility issues.