My understanding on the storm is the messages between the spouts and bolts doesn't need persistence.
Because storm guarantees message processing by itself and guaranteeing message processing is nothing to do with the persistence.
So the persistence will not be an issue of the messaging in the storm.
Also a broker having system can cause a problem at the reliability and the scalability.
I don't have any experience on MQTT but AMQP must be slow for the real time processing in the storm.
I think any alternative messaging will be great (or pluggable) if it has no broker and is faster than 0MQ.
But the security might have to be considered at anyhow.
Thanks
Min