The dependency tree of the org.wildfly.core:wildfly-cli module must be strictly controlled (no transitives; everything explicit) so we don't end up with consumers of the client artifact expecting or concerning themselves with dependencies that are not needed.

For example we have reports of users being concerned about these deps, which are not relevant to the CLI client:

org.wildfly.security:wildfly-elytron-http-oidc:1.15.9.Final-redhat-00001
org.wildfly.security:wildfly-elytron-jose-jwk:1.15.9.Final-redhat-00001
org.wildfly.security:wildfly-elytron-jose-util:1.15.9.Final-redhat-00001