diff --git a/modules/server/src/main/java/org/jboss/wsf/stack/cxf/JBossWSInvoker.java b/modules/server/src/main/java/org/jboss/wsf/stack/cxf/JBossWSInvoker.java
index <HASH>..<HASH> 100644
--- a/modules/server/src/main/java/org/jboss/wsf/stack/cxf/JBossWSInvoker.java
+++ b/modules/server/src/main/java/org/jboss/wsf/stack/cxf/JBossWSInvoker.java
@@ -133,6 +133,8 @@ public class JBossWSInvoker extends JAXWSMethodInvoker implements Invoker
          targetBean = this.getServiceObject(exchange);
       }
 
+      //[JBWS-3843] workaround: set the CallbackHandler threadlocal again; as a matter of fact, if that's in the Exchange,
+      //DIGEST auth is being used and that will cause the EJB layer to re-do authentication because of the bug
       CallbackHandler cbHandler = exchange.getInMessage().get(CallbackHandler.class);
       Object obj = null;
       try
[JBWS-<I>] Adding comment explaining the workaround; proper fix will come in PicketBox