Karaf 3 exposes ssh console on port 8101. The security basically basically the same as in upstream Karaf of corresponding versions, except library version overrides implemented in odlparent:karaf-parent.
No features/APIs which are EOLed, deprecated, and/or removed in this release.
No standard implemented directly (see upstream projects).