This week's book giveaway is in the OCMJEA forum. We're giving away four copies of OCM Java EE 6 Enterprise Architect Exam Guide and have Paul Allen & Joseph Bambara on-line! See this thread for details.
Doesn't matter, YOU CAN keep those files separate, just give the following in:
prefix can be say your project name for example and spring's the folder or package where your xml config resources might be ... that way all your bean definitions would be available, I think it is a good practice to keep security config separate ... just a thought.