When the server supports Jakarta EE 11 users may be bringing existing configurations from prior servers that supported the security manager subsystem.

It should be possible for those configurations to be loaded so may may need the subsystem to be no-op.

The subsystem should then have a migrate op - in this case migration is likely to just delete the subsystem and extension registration from the model.