Securing JMS Destinations

I have a problem in configuring the security for the destination queue which is the permanent queue. I have DBServerLogin configured for "jbossmq" in login-config.xml where unauthenticated identity is "guest"
I dont want to add this principal to my SecurityConfig for the queue. If I dont add the principal I get
javax.jms.JMSSecurityException: Connection not authorized to add messages to destination: FirstQueue while trying to send messages to this queue from jms client.

Suppose somebody is using jms app. client for adding messages to queue while MDB is the consumer.
a)app client should supply username,password while getting queueConnection using myConnectionFactory.createQueueConnection("username","passwd")
b)MDB deployment on the otherhand should be mentioning these in jboss-jar.xml.

<jboss>
<enterprise-beans>
<message-driven>
<ejb-name>MessageBean</ejb-name>
<destination-jndi-name>queue/FirstQueue</destination-jndi-name>
<mdb-user>dynsub</mdb-user>
<mdb-passwd >dynsub</mdb-passwd>
</message-driven>
</enterprise-beans>
</jboss>

[ February 01, 2005: Message edited by: M.Junaid ]