docs: private SecurityMetadata getDefaultAdminSecurityMetadata() {
          if (secMetadata == null) {
              secMetadata = new SecurityServletConfiguratorHelper(null);
  
              // It appears that the web.xml is honored now, but add Viewer role for consistency
              List<String> roles = new ArrayList<String>();
              roles.add(ManagementSecurityConstants.ADMINISTRATOR_ROLE_NAME);
              roles.add(ManagementSecurityConstants.VIEWER_ROLE_NAME);
              secMetadata.setRoles(roles);
  
              String urlPattern = "/*";
              List<String> allURLPatternList = new ArrayList<String>();
              allURLPatternList.add(urlPattern);
              WebResourceCollection collection = new WebResourceCollection(allURLPatternList, new ArrayList<String>());
              List<WebResourceCollection> collectionList = new ArrayList<WebResourceCollection>();
              collectionList.add(collection);
  
              SecurityConstraint constraint = new SecurityConstraint(collectionList, roles, true, false, false, false);
              List<SecurityConstraint> constraints = new ArrayList<SecurityConstraint>();
              constraints.add(constraint);
              SecurityConstraintCollection constraintCollection = new SecurityConstraintCollectionImpl(constraints);
              secMetadata.setSecurityConstraintCollection(constraintCollection);
  
              // Support CLIENT_CERT login. Fallback to basic auth is enabled.
              LoginConfiguration loginConfiguration = new LoginConfigurationImpl(LoginConfiguration.CLIENT_CERT, collabUtils.getUserRegistryRealm(securityServiceRef), null);
              secMetadata.setLoginConfiguration(loginConfiguration);
  
              Map<String, String> urlPatternToServletName = new HashMap<String, String>();
              urlPatternToServletName.put(urlPattern, "IBMJMXConnectorREST"); //TODO read from constant - Kevin or Arthur
              secMetadata.setUrlPatternToServletNameMap(urlPatternToServletName);
          }
          return secMetadata;
      }