Issue

• We use picketlink sts authentication modules. Performance degrades as users increase, and STS client creation appears to be the bottleneck:

"http-127.0.0.1-8080-11" daemon prio=10 tid=0x00007fd570011000 nid=0x1d99 waiting for monitor entry [0x00007fd53b2ee000]
   java.lang.Thread.State: BLOCKED (on object monitor)
    at java.util.zip.ZipFile$ZipFileInputStream.read(ZipFile.java:444)
    - waiting to lock <0x00007fd62d6e92f0> (a java.util.jar.JarFile)
    at java.util.zip.ZipFile$1.fill(ZipFile.java:230)
    at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:141)
    at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:105)
    at java.util.jar.JarVerifier$VerifierStream.read(JarVerifier.java:428)
    at org.jboss.virtual.plugins.context.zip.CertificateReaderInputStream.read(CertificateReaderInputStream.java:106)
    at org.apache.xerces.impl.XMLEntityManager$RewindableInputStream.read(Unknown Source)
    at org.apache.xerces.impl.XMLEntityManager.setupCurrentEntity(Unknown Source)
    at org.apache.xerces.impl.XMLVersionDetector.determineDocVersion(Unknown Source)
    at org.apache.xerces.impl.xs.opti.SchemaParsingConfig.parse(Unknown Source)
    at org.apache.xerces.impl.xs.opti.SchemaParsingConfig.parse(Unknown Source)
    at org.apache.xerces.impl.xs.opti.SchemaDOMParser.parse(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.getSchemaDocument(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.resolveSchema(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.constructTrees(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.constructTrees(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.constructTrees(Unknown Source)
    at org.apache.xerces.impl.xs.traversers.XSDHandler.parseSchema(Unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaLoader.loadSchema(Unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.findSchemaGrammar(Unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.handleStartElement(Unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.startElement(Unknown Source)
    at org.apache.xerces.xinclude.XIncludeHandler.startElement(Unknown Source)
    at org.apache.xerces.impl.XMLNSDocumentScannerImpl.scanStartElement(Unknown Source)
    at org.apache.xerces.impl.XMLNSDocumentScannerImpl$NSContentDispatcher.scanRootElementHook(Unknown Source)
    at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source)
    at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
    at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
    at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
    at org.apache.xerces.parsers.XMLParser.parse(Unknown Source)
    at org.apache.xerces.parsers.AbstractSAXParser.parse(Unknown Source)
    at org.apache.xerces.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source)
    at org.jboss.xb.binding.parser.sax.SaxJBossXBParser.parse(SaxJBossXBParser.java:199)
    at org.jboss.xb.binding.parser.sax.SaxJBossXBParser.parse(SaxJBossXBParser.java:183)
    at org.jboss.xb.binding.UnmarshallerImpl.unmarshal(UnmarshallerImpl.java:190)
    at org.jboss.ws.metadata.config.JBossWSConfigFactory.parse(JBossWSConfigFactory.java:90)
    at org.jboss.ws.metadata.config.JBossWSConfigFactory.getConfig(JBossWSConfigFactory.java:151)
    at org.jboss.ws.metadata.umdm.EndpointMetaData.initEndpointConfigMetaData(EndpointMetaData.java:891)
    at org.jboss.ws.metadata.umdm.EndpointMetaData.getConfig(EndpointMetaData.java:814)
    at org.jboss.ws.metadata.umdm.EndpointMetaData.configure(EndpointMetaData.java:751)
    at org.jboss.ws.core.CommonBindingProvider.configure(CommonBindingProvider.java:78)
    at org.jboss.ws.core.CommonBindingProvider.<init>(CommonBindingProvider.java:64)
    at org.jboss.ws.core.jaxws.binding.BindingProviderImpl.<init>(BindingProviderImpl.java:51)
    at org.jboss.ws.core.jaxws.client.DispatchImpl.<init>(DispatchImpl.java:110)
    at org.jboss.ws.core.jaxws.spi.ServiceDelegateImpl.createDispatch(ServiceDelegateImpl.java:339)
    at javax.xml.ws.Service.createDispatch(Service.java:325)
    at org.picketlink.identity.federation.core.wstrust.STSClient.<init>(STSClient.java:116)
    at org.picketlink.trust.jbossws.jaas.JBWSTokenIssuingLoginModule$JBWSTokenClient.<init>(JBWSTokenIssuingLoginModule.java:170)
    at org.picketlink.trust.jbossws.jaas.JBWSTokenIssuingLoginModule.createWSTrustClient(JBWSTokenIssuingLoginModule.java:109)
    at org.picketlink.identity.federation.core.wstrust.auth.AbstractSTSLoginModule.login(AbstractSTSLoginModule.java:372)