for shiro 2, it's not clear to me where realms will be instantiated and then setRealms is called
the IniSecurityManagerFactory seemed closest to an actual implementation that gets realms from a RealmFactory but it is deprecated in favor of an environment-variable counterpart that doesn't appear to exist? Am I missing something? Thanks DG
