Include the Elytron extension in appclient.xml to make it possible to add security settings needed for the TCK via yaml. Config extension via yaml cannot add extensions.

Adding the subsystem itself is not necessary.