in the Realm definitionlocalDataSource="true"
TLS/SSL provides you with transport security and you can still use XML encryption/digital signature for XML bodies.
So in the end SOAP isn't the universal "over-the-web" service access protocol.
But it's better to consider using MBeanServerInvocationHandler.newProxyInstance method to get MBean Proxy and work with that.