EAP 6 - adding LdapExtended / LdapExt / LdapExtLoginModule using the CLI in EAP 6 (authentication, security domain)

Issue

• Is there a CLI command to create the following kind of "security-domain" ?
• How to add multiple "login-module" in a "security-domain" through CLI?

<security-domain name="testLDAPDomain">
  <authentication>
    <login-module code="org.jboss.security.auth.spi.LdapExtLoginModule" flag="required">
      <module-option name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
      <module-option name="java.naming.security.authentication" value="simple"/>
      <module-option name="java.naming.provider.url" value="ldap://myldap:369"/>
      <module-option name="java.naming.referral" value="follow"/>
      <module-option name="bindDN" value="cn=mycn,OU=myou,OU=Accounts,OU=Management,DC=TestDC,DC=DCA"/>
      <module-option name="bindCredential" value="abc@a123"/>
      <module-option name="baseCtxDN" value="DC=TestDC,DC=DCA"/>
      <module-option name="rolesCtxDN" value="dc=testdc,dc=dca"/>
      <module-option name="roleAttributeID" value="memberOf"/>
      <module-option name="roleAttributeIsDN" value="true"/>
      <module-option name="roleNameAttributeID" value="cn"/>
      <module-option name="throwValidateError" value="true"/>
      <module-option name="searchScope" value="SUBTREE_SCOPE"/>
      <module-option name="allowEmptyPasswords" value="false"/>
      <module-option name="baseFilter" value="(&amp;(ObjectClass=user)(userPrincipalName={0}@testdc.dca))"/>
      <module-option name="roleFilter" value="(&amp;(ObjectClass=user)(userPrincipalName={0}@testdc.dca))"/>
      <module-option name="roleRecursion" value="5"/>
    </login-module>
  </authentication>
</security-domain>

• I'm trying to apply a working SPNEGO security-domain using the CLI, how to add a security-domain like SPNEGO which has multiple login-modules using JBOSS-CLI ?
• When defining a security domain involving two LDAP with the foloowing CLi commands,the command fails giving duplicate error

/subsystem=security/security-domain=ldap-federated:add(cache-type=default)
/subsystem=security/security-domain=ldap-federated/authentication=classic:add
/subsystem=security/security-domain=ldap-federated/authentication=classic:write-attribute(name=login-modules,value=[{code=>org.jboss.security.auth.spi.LdapExtLoginModule,flag=>sufficient,module-options=>[java.naming.factory.initial=>"com.sun.jndi.ldap.LdapCtxFactory",java.naming.provider.url=>"ldap://myFirstLdap:369"]},{code=>org.jboss.security.auth.spi.LdapExtLoginModule,flag=>sufficient,module-options=>[java.naming.factory.initial=>"com.sun.jndi.ldap.LdapCtxFactory",java.naming.provider.url=>"ldap://mySecondLdap:369"]}])