How can I enable unsecured and secured EJB access on JBoss EAP 7?

Issue

How can I configure JBoss EAP 7 to allow remote access to unsecured EJB so that it can be accessed without a username/password?

I would like to configure EAP 7 so that when I provide user/password, my login chain will be called. When no user/password is provided, it's a an anoynmous call that gets to the server as well. The "anonymous user" won't have any roles, therefore he is only allowed to call EJBs annotated with "@PermitAll".