SecurityConfiguration doesn't seem to do anything

I am having trouble with openjms SecurityConfiguration. I assume that
if I set securityEnabled to true, I should need a user name and
password for the ConnectionFactory.creatConnection(username, password)
method, so that only registered users can create connections. However,
even with securityEnabled="true" I can still create a connection
without a username and password. Am I misunderstanding what the
SecurityConfiguration does? How can I make it so that only registered
users can create connections? I can't find any documentation on this
topic.

I am using openjms 0.7.7-beta1, here is a portion from my config file:

  <SecurityConfiguration securityEnabled="true"/>

  <Users>
    <User name="admin" password="openjms"/>
    <User name="user1" password="password1"/>
  </Users>

Any help would be greatly appreciated.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/