The installer provides an option to install the jmx-console, web-console and other invokers unsecured.
Unchecking the boxes still forces the user to enter a user name and password for the console security.
This forces the user to install the consoles secured.

Can the user pick and choose the console he wants to secure?