The artifacts org.jboss.security:jbossxacml:jar and org.wildfly:wildfly-security-api:jar are not present in WildFly dependency management anymore, yet included in the Jakarta EE8 BOM builder at https://github.com/wildfly/boms/blob/main/jakartaee8/pom.xml#L422 and https://github.com/wildfly/boms/blob/main/jakartaee8/pom.xml#L433

Should these just removed or be replaced? Also see a picketbox artifact there, but that one still present in WildFly dependency management...