docs: private SecurityConstraint getConstraintFromHttpElement(SecurityMetadata securityMetadataFromDD, Collection<String> urlPatterns, ServletSecurityElement servletSecurity) {
          List<String> omissionMethods = new ArrayList<String>();
          if (!servletSecurity.getMethodNames().isEmpty()) {
              omissionMethods.addAll(servletSecurity.getMethodNames()); //list of methods named by @HttpMethodConstraint
          }
  
          WebResourceCollection webResourceCollection = new WebResourceCollection((List<String>) urlPatterns, new ArrayList<String>(), omissionMethods, securityMetadataFromDD.isDenyUncoveredHttpMethods());
          List<WebResourceCollection> webResourceCollections = new ArrayList<WebResourceCollection>();
          webResourceCollections.add(webResourceCollection);
          return createSecurityConstraint(securityMetadataFromDD, webResourceCollections, servletSecurity, true);
      }