managementSecurityFilterChain does not have an explicit order and will override the securityFilterChain in RemoteDevtoolsSecurityConfiguration. We should probably order managementSecurityFilterChain with BASIC_AUTH_ORDER.
Comment From: philwebb
Closing in favor of PR #25868