Currently WAM and also the webapps depend on the existing specific Application Framework. If there are changes to this component to use a different security model or communication protocols, we would need to adapt the Web Application Manager to it, and also the existing webapps (or add some websockets wrapper in the middle) to ensure they are still functional.