The IDM subsystem is always initialized even if provided a custom Authenticator that does not use the IDM capabilities.

The root cause is the DefaultIdentity logic, which is injecting a Instance<Authenticator> what makes all available authenticators, including the IdmAuthenticator, to be initialized.