As we add support for Jakarta EE 11 I am planning to move Jakarta Authentication to it's own subsystem which would not support being installed in a host controller.

In the short term to address this bug it feels easier to just ensure our default host.xml config has this registration turned off.