The test-suite has long used the broker's ability to configure the security manager. This commit implements this functionality via XML configuration.