Currently, the wildfly-elytron-http-oidc, wildfly-elytron-jose-jwk, and wildfly-elytron-jose-util dependencies come in via XP4 since they are needed for the new elytron-oidc-client subsystem. However, this means that both the wildfly-core-eap and xp-4.0.x pom.xml files currently define a version.org.wildfly.security.elytron value. To avoid needing to keep the version in sync in two places, we can just move these dependencies over to wildfly-core-eap. The new modules that actually make use of these dependencies can remain in XP4.