https://github.com/spring-projects/spring-security/issues/12629 means we now need to completely migrate to lambda config