Ideally our user boms won't result in transitive deps that aren used by WildFly. In JBEAP-29880 it was identified that such a dep on io.dropwizard.metrics:metrics-core was coming in via our org.opensaml:opensaml-saml-impl dependency. WildFly does not provide that artifact and rhn-engineering-ema reports that it's not needed, so we should exclude it. It's already excluded by the opensaml-core dependency.