@Override
  public Set<ObjectInstance> queryMBeans(ObjectName name, QueryExp query) {
    // We need to filter out the AccessControlMXBean so that the clients wouldn't see it
    if (query != null) {
      return mbs.queryMBeans(name, Query.and(query, notAccessControlMBean));
    } else {
      return mbs.queryMBeans(name, notAccessControlMBean);
    }
  }
This class intercepts all MBean requests for GemFire MBeans and passed it to
ManagementInterceptor for authorization

@since Geode 1.0
geode-core/src/main/java/org/apache/geode/management/internal/security/MBeanServerWrapper.java