Which two capabilities are provided by the Java Authentication and Authorization Services (JAAS) API? (Choose two.)
A. protecting data from unauthorized viewing by using encryption
B. verifying that a user is allowed to perform an action
C. ensuring that data is not modified in transit
D. verifying identity claims from users
B and D