These two modules were added as intermediaries to allow org.jboss.as.security to be excluded, we now need to be able to omit picketbox as well but these modules have a non optional dependency.