Make a change to xp-4.0.x analogous to what was done in 7.4.x for JBEAP-22849. The difference here is the '-Delytron' profile isn't really relevant to the XP testsuite, which in most cases runs the docs/examples/enable-microprofile.xml script which removes most use of legacy security.  So for XP we mostly just need to run a script that removes the final legacy bits that enable-microprofile.xml leaves (legacy kernel ApplicationRealm). An exceptio is the elytron-oidc-client module which doesn't run enable-microprofile.xml  and thus needs to run a script with a larger set of changes.