docs: private SecurityMetadata getSecurityMetadata(WebAppConfig webAppConfig) {
          WebModuleMetaData wmmd = ((WebAppConfigExtended) webAppConfig).getMetaData();
          return (SecurityMetadata) wmmd.getSecurityMetaData();
      }