Currently, the JMX port is completely unsecured. We should document how to use SSL and then use a username/password to connect to JMX.