3rd-parties using ActiveMQ for integration (SaaS, Cloud products, etc) would benefit from having a way to deny the creation of vm:// transport + remote loading of xml bean to limit security exposure.