docs: private boolean isAuthMechOverridden() {
          WebAppSecurityConfig webAppSecConfig = getWebAppSecurityConfig();
          String value = webAppSecConfig.getOverrideHttpAuthMethod();
          if (value != null) {
              if ((value.equals(LoginConfiguration.FORM) || value.equals(LoginConfiguration.BASIC))) {
                  return true;
              } else if (value.equals(LoginConfiguration.CLIENT_CERT)) {
                  // if CLIENT_CERT is set, check failover setting.
                  if (webAppSecConfig.getAllowFailOverToFormLogin() || webAppSecConfig.getAllowFailOverToBasicAuth()) {
                      return true;
                  }
              }
          }
          return false;
      }