Presently the following module depends on PicketBox:

org/jboss/as/appclient/main/module.xml

This needs to be optional but code changes may be required to make this possible.

If there are common security utilities in use these could be forked to WildFly Elytron or WildFly once identified.