With the security realms removed the secondary HC now needs to use an Elytron authentication context to define the connection configuration. We probably should still have a simple username / password variant using a credential reference.