One way to opt-in to this behavior may be when an application chooses to wire an AuthenticationManager directly in the configurer.