...outside of Java EE resulted in incomplete and divergent implementation. Servlet 3.0 remedies that problem by requiring commonsupport for security-constraint processing among all Servlet 3.0 containers. Developers benefit from this convergence...
http://blogs.sun.com/monzillo/entry/new_security_features_of_ee6
...proposed as the flat-fee per month for this new support model. This flat-fee included resolution of the most commonsupport issues. If a customer’s issue is related to a lack of regular maintenance or could have otherwise been prevented...
http://www.deconn.com/we-are-warriors-fighting-to-eliminate-the-billable-hour