code: @Override
      public SecurityMetadata getSecurityMetadata() {
          SecurityMetadata sm = super.getSecurityMetadata();
          if (sm == null) {
              return getDefaultAdminSecurityMetadata();
          } else {
              return sm;
          }
      }
docs: Get the effective SecurityMetadata for this application.
  First, try to defer to the application collaborator to see if the application
  provides data. If so, use it. Otherwise, fallback to the default SecurityMetadata.
  
  {@inheritDoc}