See https://github.com/spring-projects/spring-security/pull/8996#discussion_r506652742 and https://github.com/spring-projects/spring-security/pull/8996#pullrequestreview-528354323
