Client in clientCache is not properly invalidated with security enabled

clientCache in XceiverClientManager hold the client created in XceiverClientManager. Client in clientCache will be invalidated by two ways,

one is the explicitly call XceiverClientManager#releaseClient for this client,


another is when the client in clientCache is not accessed for a predefined period of time.

When XceiverClientManager#releaseClient is called, it will invalidate the client based on the constructed cache key, where it doesn't match the key constructed when client is put into clientCache when security is enabled.