Core still has the 'elytron' profile that appears in various testsuite modules. This was originally used to switch from testing legacy security to testing elytron security. Anywhere the profile still exists and that's all it's used for, it should be removed.