Review security-api and security-integration dependency on PicketBox

These two modules were added as intermediaries to allow org.jboss.as.security to be excluded, we now need to be able to omit picketbox as well but these modules have a non optional dependency.